···

       
68
       
 
       
    services = {

     

       
69
       
 
       
      nginx = {

     

       
70
       
 
       
        enable = true;

     

       
71
       
-
       
        upstreams.tailscale-derper = {

     

       
72
       
-
       
          servers."127.0.0.1:${toString cfg.port}" = { };

     

       
73
       
-
       
          extraConfig = ''

     

       
74
       
-
       
            keepalive 64;

     

       
75
       
-
       
          '';

     

       
76
       
-
       
        };

     

       
77
       
 
       
        virtualHosts."${cfg.domain}" = {

     

       
78
       
 
       
          addSSL = true; # this cannot be forceSSL as derper sends some information over port 80, too.

     

       
79
       
 
       
          locations."/" = {

     

       
80
       
-
       
            proxyPass = "http://tailscale-derper";

     

       
81
       
 
       
            proxyWebsockets = true;

     

       
82
       
 
       
            extraConfig = ''

     

       
83
       
 
       
              keepalive_timeout 0;

     

···

       
68
       
 
       
    services = {

     

       
69
       
 
       
      nginx = {

     

       
70
       
 
       
        enable = true;

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
0
       
 
       

     

       
71
       
 
       
        virtualHosts."${cfg.domain}" = {

     

       
72
       
 
       
          addSSL = true; # this cannot be forceSSL as derper sends some information over port 80, too.

     

       
73
       
 
       
          locations."/" = {

     

       
74
       
+
       
            proxyPass = "http://127.0.0.1:${toString cfg.port}";

     

       
75
       
 
       
            proxyWebsockets = true;

     

       
76
       
 
       
            extraConfig = ''

     

       
77
       
 
       
              keepalive_timeout 0;