diff options
author | Robert Obryk <robryk@gmail.com> | 2023-02-05 23:11:37 +0100 |
---|---|---|
committer | pennae <82953136+pennae@users.noreply.github.com> | 2023-02-05 23:47:19 +0100 |
commit | 0a6dd02620e291bf2e88ac583b8ba56340e43ae6 (patch) | |
tree | becffd2d8910245b3d8a2a5eed73f87d77b2f67b | |
parent | 28116031e25579216521f7b091160cb0f355e058 (diff) |
nixos/firefox-syncserver: enable recommendedProxySettings
The syncserver requires a Host header identical to the one provided by
the client.
-rw-r--r-- | nixos/modules/services/networking/firefox-syncserver.nix | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/firefox-syncserver.nix b/nixos/modules/services/networking/firefox-syncserver.nix index a06b9573a850..42924d7f6993 100644 --- a/nixos/modules/services/networking/firefox-syncserver.nix +++ b/nixos/modules/services/networking/firefox-syncserver.nix @@ -304,6 +304,10 @@ in forceSSL = cfg.singleNode.enableTLS; locations."/" = { proxyPass = "http://127.0.0.1:${toString cfg.settings.port}"; + # We need to pass the Host header that matches the original Host header. Otherwise, + # Hawk authentication will fail (because it assumes that the client and server see + # the same value of the Host header). + recommendedProxySettings = true; }; }; }; |