mirror of
https://github.com/oqyude/nixos.git
synced 2026-10-07 20:47:14 +03:00
Revert "vds/nginx: forward real client IP to 3x-ui"
This reverts commit 2cd636b6d4.
This commit is contained in:
@@ -6,16 +6,6 @@
|
||||
}:
|
||||
let
|
||||
server = "100.64.0.0";
|
||||
# Forward real client IP/host to 3x-ui so it can manage addresses
|
||||
# (subscription URLs, logs, geo-rules, fail2ban) as if it shared the
|
||||
# host network. With podman bridge networking, the source IP that
|
||||
# 3x-ui sees is the bridge gateway instead of the actual client.
|
||||
proxyHeaders = ''
|
||||
proxy_set_header Host $host;
|
||||
proxy_set_header X-Real-IP $remote_addr;
|
||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
||||
proxy_set_header X-Forwarded-Proto $scheme;
|
||||
'';
|
||||
in
|
||||
{
|
||||
users.users.nginx.extraGroups = [ "acme" ];
|
||||
@@ -34,22 +24,18 @@ in
|
||||
"/" = {
|
||||
proxyPass = "http://localhost:2049";
|
||||
proxyWebsockets = true;
|
||||
extraConfig = proxyHeaders;
|
||||
};
|
||||
"/subs/" = {
|
||||
proxyPass = "http://localhost:2096";
|
||||
proxyWebsockets = true;
|
||||
extraConfig = proxyHeaders;
|
||||
};
|
||||
"/subsjs/" = {
|
||||
proxyPass = "http://localhost:2096";
|
||||
proxyWebsockets = true;
|
||||
extraConfig = proxyHeaders;
|
||||
};
|
||||
"/clash/" = {
|
||||
proxyPass = "http://localhost:2096";
|
||||
proxyWebsockets = true;
|
||||
extraConfig = proxyHeaders;
|
||||
};
|
||||
};
|
||||
};
|
||||
|
||||
Reference in New Issue
Block a user