summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorRobert Obryk <robryk@gmail.com>2023-02-05 23:11:37 +0100
committerpennae <82953136+pennae@users.noreply.github.com>2023-02-05 23:47:19 +0100
commit0a6dd02620e291bf2e88ac583b8ba56340e43ae6 (patch)
treebecffd2d8910245b3d8a2a5eed73f87d77b2f67b
parent28116031e25579216521f7b091160cb0f355e058 (diff)
nixos/firefox-syncserver: enable recommendedProxySettings
The syncserver requires a Host header identical to the one provided by the client.
-rw-r--r--nixos/modules/services/networking/firefox-syncserver.nix4
1 files changed, 4 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/firefox-syncserver.nix b/nixos/modules/services/networking/firefox-syncserver.nix
index a06b9573a850..42924d7f6993 100644
--- a/nixos/modules/services/networking/firefox-syncserver.nix
+++ b/nixos/modules/services/networking/firefox-syncserver.nix
@@ -304,6 +304,10 @@ in
forceSSL = cfg.singleNode.enableTLS;
locations."/" = {
proxyPass = "http://127.0.0.1:${toString cfg.settings.port}";
+ # We need to pass the Host header that matches the original Host header. Otherwise,
+ # Hawk authentication will fail (because it assumes that the client and server see
+ # the same value of the Host header).
+ recommendedProxySettings = true;
};
};
};