nixos/tailscale-derper: drop nginx upstream to improve reliability (#377640)

2025-02-02 22:18:04 +01:00
parent edc8a07b0f 0405f0270c
commit b1b6a16499
1 changed files with 1 additions and 7 deletions
@@ -68,16 +68,10 @@ in
    services = {
      nginx = {
        enable = true;
-        upstreams.tailscale-derper = {
-          servers."127.0.0.1:${toString cfg.port}" = { };
-          extraConfig = ''
-            keepalive 64;
-          '';
-        };
        virtualHosts."${cfg.domain}" = {
          addSSL = true; # this cannot be forceSSL as derper sends some information over port 80, too.
          locations."/" = {
-            proxyPass = "http://tailscale-derper";
+            proxyPass = "http://127.0.0.1:${toString cfg.port}";
            proxyWebsockets = true;
            extraConfig = ''
              keepalive_timeout 0;