mirror of
https://github.com/oqyude/nixos.git
synced 2026-10-07 20:47:14 +03:00
Revert "vds/nginx: forward real client IP to 3x-ui"
This reverts commit 2cd636b6d4.
This commit is contained in:
@@ -6,16 +6,6 @@
|
|||||||
}:
|
}:
|
||||||
let
|
let
|
||||||
server = "100.64.0.0";
|
server = "100.64.0.0";
|
||||||
# Forward real client IP/host to 3x-ui so it can manage addresses
|
|
||||||
# (subscription URLs, logs, geo-rules, fail2ban) as if it shared the
|
|
||||||
# host network. With podman bridge networking, the source IP that
|
|
||||||
# 3x-ui sees is the bridge gateway instead of the actual client.
|
|
||||||
proxyHeaders = ''
|
|
||||||
proxy_set_header Host $host;
|
|
||||||
proxy_set_header X-Real-IP $remote_addr;
|
|
||||||
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
|
|
||||||
proxy_set_header X-Forwarded-Proto $scheme;
|
|
||||||
'';
|
|
||||||
in
|
in
|
||||||
{
|
{
|
||||||
users.users.nginx.extraGroups = [ "acme" ];
|
users.users.nginx.extraGroups = [ "acme" ];
|
||||||
@@ -34,22 +24,18 @@ in
|
|||||||
"/" = {
|
"/" = {
|
||||||
proxyPass = "http://localhost:2049";
|
proxyPass = "http://localhost:2049";
|
||||||
proxyWebsockets = true;
|
proxyWebsockets = true;
|
||||||
extraConfig = proxyHeaders;
|
|
||||||
};
|
};
|
||||||
"/subs/" = {
|
"/subs/" = {
|
||||||
proxyPass = "http://localhost:2096";
|
proxyPass = "http://localhost:2096";
|
||||||
proxyWebsockets = true;
|
proxyWebsockets = true;
|
||||||
extraConfig = proxyHeaders;
|
|
||||||
};
|
};
|
||||||
"/subsjs/" = {
|
"/subsjs/" = {
|
||||||
proxyPass = "http://localhost:2096";
|
proxyPass = "http://localhost:2096";
|
||||||
proxyWebsockets = true;
|
proxyWebsockets = true;
|
||||||
extraConfig = proxyHeaders;
|
|
||||||
};
|
};
|
||||||
"/clash/" = {
|
"/clash/" = {
|
||||||
proxyPass = "http://localhost:2096";
|
proxyPass = "http://localhost:2096";
|
||||||
proxyWebsockets = true;
|
proxyWebsockets = true;
|
||||||
extraConfig = proxyHeaders;
|
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
};
|
};
|
||||||
|
|||||||
Reference in New Issue
Block a user