jawz/NixOS
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

cleanup proxy settings

Browse Source
This commit is contained in:
Danilo Reyes 2025-03-28 00:31:47 -06:00
parent c7beaaf8dd
commit 6519d409ad
1 changed files with 0 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
modules/servers/synapse.nix
View File

@ -78,15 +78,6 @@ in
extraConfig = '' extraConfig = ''
ssl_verify_client on; ssl_verify_client on;
ssl_client_certificate ${config.sops.secrets."iqQCY4iAWO-ca/pem".path}; ssl_client_certificate ${config.sops.secrets."iqQCY4iAWO-ca/pem".path};
set $client_requires_cert 1;
if ($remote_addr ~ "^10\.100\.0\.[0-9]+$") {
set $client_requires_cert 0;
}
if ($client_requires_cert = 1) {
if ($ssl_client_verify != SUCCESS) {
return 403;
}
}
error_page 403 /403.html; error_page 403 /403.html;
''; '';
}; };