···

       
326
       
326
       
 
       
- `services.varnish.http_address` has been superseeded by `services.varnish.listen` which is now

     

       
327
       
327
       
 
       
  structured config for all of varnish's `-a` variations.

     

       
328
       
328
       
 
       


     

       
329
       
329
       
+
       
- `services.nginx.recommendedProxySettings` now sets `X-Forwarded-Server` to the hostname of nginx instead of the original host.

     

       
330
       
330
       
+
       


     

       
329
       
331
       
 
       
- [](#opt-services.gnome.gnome-keyring.enable) does not ship with an SSH agent anymore, as this is now handled by the `gcr_4` package instead of `gnome-keyring`. A new module has been added to support this, under [](#opt-services.gnome.gcr-ssh-agent.enable) (its default value has been set to [](#opt-services.gnome.gnome-keyring.enable) to ensure a smooth transition). See the [relevant upstream PR](https://gitlab.gnome.org/GNOME/gcr/-/merge_requests/67) for more details.

     

       
330
       
332
       
 
       


     

       
331
       
333
       
 
       
- The `nettools` package (ifconfig, arp, mii-tool, netstat, route) is not installed by default anymore. The suite is unmaintained and users should migrate to `iproute2` and `ethtool` instead.

     

···

       
108
       
108
       
 
       
    proxy_set_header        X-Forwarded-For $proxy_add_x_forwarded_for;

     

       
109
       
109
       
 
       
    proxy_set_header        X-Forwarded-Proto $scheme;

     

       
110
       
110
       
 
       
    proxy_set_header        X-Forwarded-Host $host;

     

       
111
       
111
       
-
       
    proxy_set_header        X-Forwarded-Server $host;

     

       
111
       
111
       
+
       
    proxy_set_header        X-Forwarded-Server $hostname;

     

       
112
       
112
       
 
       
  '';

     

       
113
       
113
       
 
       


     

       
114
       
114
       
 
       
  proxyCachePathConfig = concatStringsSep "\n" (