diff --git a/hosts/hetzner-arm/containers/rss/default.nix b/hosts/hetzner-arm/containers/rss/default.nix index 8cdcb22..7a08bbf 100644 --- a/hosts/hetzner-arm/containers/rss/default.nix +++ b/hosts/hetzner-arm/containers/rss/default.nix @@ -46,13 +46,18 @@ in { services.nginx = { enable = true; + upstreams."freshrss" = { + servers = "${containerIP}:80"; + extraConfig = '' + keepalive 64; + ''; + }; virtualHosts."freshrss.owo.monster" = { enableACME = true; forceSSL = true; + locations."/" = { - proxyPass = "http://${containerIP}:80/"; - proxyWebsockets = true; - recommendedProxySettings = true; + proxyPass = "http://freshrss/"; extraConfig = '' add_header X-Frame-Options SAMEORIGIN; add_header X-XSS-Protection "1; mode=block";