nixos/tailscale-derper: drop nginx upstream to improve reliability (#377640)

Sandro b1b6a164 edc8a07b

Changed files
+1 -7
nixos
modules
services
+1 -7
nixos/modules/services/networking/tailscale-derper.nix
···
services = {
nginx = {
enable = true;
-
upstreams.tailscale-derper = {
-
servers."127.0.0.1:${toString cfg.port}" = { };
-
extraConfig = ''
-
keepalive 64;
-
'';
-
};
virtualHosts."${cfg.domain}" = {
addSSL = true; # this cannot be forceSSL as derper sends some information over port 80, too.
locations."/" = {
-
proxyPass = "http://tailscale-derper";
proxyWebsockets = true;
extraConfig = ''
keepalive_timeout 0;
···
services = {
nginx = {
enable = true;
virtualHosts."${cfg.domain}" = {
addSSL = true; # this cannot be forceSSL as derper sends some information over port 80, too.
locations."/" = {
+
proxyPass = "http://127.0.0.1:${toString cfg.port}";
proxyWebsockets = true;
extraConfig = ''
keepalive_timeout 0;