diff --git a/container/Yt.nix b/container/Yt.nix index b182c5c..daf13e3 100644 --- a/container/Yt.nix +++ b/container/Yt.nix @@ -19,6 +19,8 @@ in { captcha_enabled = false; check_tables = true; registration_enabled = false; + external_port = 443; + https_only = true; }; }; }; diff --git a/container/proxy/host/Yt.nix b/container/proxy/host/Yt.nix index ca7337f..ec17dc6 100644 --- a/container/proxy/host/Yt.nix +++ b/container/proxy/host/Yt.nix @@ -11,7 +11,17 @@ in { allow ${container.localAccess}; allow ${container.config.vpn.address}; deny all; + proxy_pass http://''$${name}$request_uri; + + proxy_set_header X-Forwarded-For $remote_addr; + proxy_set_header Host $host; + proxy_http_version 1.1; + proxy_set_header Connection ""; + + proxy_hide_header Content-Security-Policy; + proxy_hide_header X-Frame-Options; + proxy_hide_header X-Content-Type-Options; } ssl_certificate /etc/letsencrypt/live/${domain}/fullchain.pem;