diff options
| author | Mel <mel@rnrd.eu> | 2026-05-01 23:33:19 +0200 |
|---|---|---|
| committer | Mel <mel@rnrd.eu> | 2026-05-01 23:33:19 +0200 |
| commit | be79e9e92b092fc50620084d6532e6de535e6329 (patch) | |
| tree | dfb671a6629af0fcd8ac4854401065b4d0eedf71 /modules/tunnel | |
| parent | a205d5b3900fd0024fc94a1fa751ec96cc3f6ed8 (diff) | |
| download | network-be79e9e92b092fc50620084d6532e6de535e6329.tar.zst network-be79e9e92b092fc50620084d6532e6de535e6329.zip | |
Don't set real_ip headers for Cloudflare on Tunnel egress hosts
Signed-off-by: Mel <mel@rnrd.eu>
Diffstat (limited to 'modules/tunnel')
| -rw-r--r-- | modules/tunnel/egress.nix | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/modules/tunnel/egress.nix b/modules/tunnel/egress.nix index 55946ce..228a06a 100644 --- a/modules/tunnel/egress.nix +++ b/modules/tunnel/egress.nix @@ -136,6 +136,9 @@ in settingsFile = "/run/xray-configuration/xray.json"; }; + # don't unwrap cloudflare addresses + foundation.www.behindCloudflare = false; + services.nginx = { defaultListen = [ { addr = "127.0.0.1"; port = nginxPort; ssl = true; proxyProtocol = true; } |