25 lines
653 B
Nix
25 lines
653 B
Nix
|
{ tools, ... }:
|
||
|
|
with tools.nginx.vhosts;
|
||
|
|
let
|
||
|
|
inherit (tools.meta) domain;
|
||
|
|
front = "ident.${domain}";
|
||
|
|
back = tools.identity.ldap.server.hostname;
|
||
|
|
in
|
||
|
|
{
|
||
|
|
services.nginx.virtualHosts."${front}" = let
|
||
|
|
in basic // {
|
||
|
|
locations."= /".return = "302 /ipa/ui/";
|
||
|
|
locations."/" = {
|
||
|
|
# HACK: not using proxy_pass here to prevent inclusion of recommended headers
|
||
|
|
extraConfig = ''
|
||
|
|
proxy_pass https://10.10.0.11;
|
||
|
|
proxy_set_header Host ${back};
|
||
|
|
proxy_set_header Referer https://${back}/ipa/ui/;
|
||
|
|
proxy_cookie_domain ${back} ${front};
|
||
|
|
add_header Referer https://${front}/ipa/ui/;
|
||
|
|
'';
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|