diff options
| author | Arun Isaac | 2026-07-03 05:18:59 +0100 |
|---|---|---|
| committer | Arun Isaac | 2026-07-03 05:20:39 +0100 |
| commit | 37471bfbf36f355a522c86e929a02c01d9b8410c (patch) | |
| tree | cfc156948289b3175e88fb6f290d3f33f02fd24e /guix/forge/nginx.scm | |
| parent | ff33a2731e421f0719ca8e2eb8134c5f549606b6 (diff) | |
| download | guix-forge-37471bfbf36f355a522c86e929a02c01d9b8410c.tar.gz guix-forge-37471bfbf36f355a522c86e929a02c01d9b8410c.tar.lz guix-forge-37471bfbf36f355a522c86e929a02c01d9b8410c.zip | |
nginx: Support PROXY protocol.
Diffstat (limited to 'guix/forge/nginx.scm')
| -rw-r--r-- | guix/forge/nginx.scm | 13 |
1 files changed, 10 insertions, 3 deletions
diff --git a/guix/forge/nginx.scm b/guix/forge/nginx.scm index 2e22bd8..3baa156 100644 --- a/guix/forge/nginx.scm +++ b/guix/forge/nginx.scm @@ -32,6 +32,7 @@ forge-nginx-configuration? forge-nginx-configuration-http-listen forge-nginx-configuration-https-listen + forge-nginx-configuration-proxy-protocol-listen forge-nginx-configuration-acme-state-directory forge-nginx-configuration-acme-challenge-directory forge-nginx-configuration-server-blocks @@ -50,6 +51,8 @@ (default (forge-ip-socket (ip "0.0.0.0") (port 443)))) + (proxy-protocol-listen forge-nginx-configuration-proxy-protocol-listen + (default #f)) (acme-state-directory forge-nginx-configuration-acme-state-directory (default "/var/lib/acme")) (acme-challenge-directory forge-nginx-configuration-acme-challenge-directory @@ -93,7 +96,7 @@ directive." "Return list of nginx server blocks to provision for forge-web service specified by @var{config}." (match-record config <forge-nginx-configuration> - (http-listen https-listen acme-state-directory acme-challenge-directory server-blocks) + (http-listen https-listen proxy-protocol-listen acme-state-directory acme-challenge-directory server-blocks) (cons (nginx-server-configuration (listen (list (nginx-socket->string http-listen))) (locations @@ -120,8 +123,12 @@ specified by @var{config}." ((name _ ...) (nginx-server-configuration (inherit server) - (listen (list (string-append (nginx-socket->string https-listen) - " ssl"))) + (listen (cons (string-append (nginx-socket->string https-listen) + " ssl") + (if proxy-protocol-listen + (list (string-append (nginx-socket->string proxy-protocol-listen) + " ssl proxy_protocol")) + (list)))) (ssl-certificate (string-append acme-state-directory "/" name "/cert.pem")) (ssl-certificate-key (string-append acme-state-directory |