From ebd3ef29e873aa034697e71b5e8d9b91870af34b Mon Sep 17 00:00:00 2001
From: Daniel Kempkens <daniel+git@kempkens.io>
Date: Sun, 9 Apr 2023 02:11:14 +0200
Subject: [PATCH] fixup

---
 secret/hosts/attic.nix      | Bin 300 -> 304 bytes
 system/nixos/home-proxy.nix |   9 +++++++--
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/secret/hosts/attic.nix b/secret/hosts/attic.nix
index b4a8899c97f941687db200105f4d8357d9eb9097..a793b5b5bf290868daa73a7af843886e193e4a79 100644
GIT binary patch
literal 304
zcmV-00nh#bM@dveQdv+`0Ha$$uZ293Q<6muWRcIVqjHu3DJp~s)%<Kzx%^4~cF|vv
zU<s~(@$pGp=_GQzq9!=JKh;i4n1&GYQECiQpGV?L998;OB$6dI^NlLcvY5*DFiF(S
zp56(cPXzYjLpBP(RyPNa)?VBY>15_<V47LE4?C3a(P|UZt5L^`%eC(ep`zq$-+hWa
zAFl9{9(&H_u6)@w8-K-fSR*D%WeTO~Xt(vQwbG{_7wai{&AwDuVqic?%CEQ~iHOBr
z1e}?t@Knk3v!$KBbc6*3@4+JDL2WLAYoH=}HLU>^DstMJ%bf_g(HD@0XS5>$FmG$T
zkkS#Xg5i!vwMpY^<kyz0ofm=tx@j@}{@4PL;4l54e=1(hcVZcY(M;@0dw?_8{<N-6
CHJ2Lz

literal 300
zcmV+{0n`2fM@dveQdv+`0Orvi)e}Dv-umv3Nmx5VEUyNoWZrDtWn-4n^L-KM-2E0f
zp0@&6@4%~7aIfA@rRQQ_=fE#V3J{XSw=_x4+mGgT9tp-BE{Q=!)HeQ+HxbA>;zKEm
z6Xom|lG*SDtNmUndzu!Bs!$di`{>-Tkne6z!3?~N&~;));=X8LsJG4D8I0NOj%CDi
zTbz==shfWsHn5m16_k7=?*65d<nLNuarwUnk$@37*GD&M9CV^u$lzlv;0&?Z<Amf%
zNtQHB!lHKJ=jF$;C|6M>Hn&faP+Y1whoFs8TkBRRX^QWw?i{d1whx$Phe)UcsV6}q
y&>eb*_JUA41Q{so8X*zATfE}pwPIYcueA&Q-DX=F^zUi>5d=p+I$^LP+WgS00F}l7

diff --git a/system/nixos/home-proxy.nix b/system/nixos/home-proxy.nix
index 97dddaa..dab24ef 100644
--- a/system/nixos/home-proxy.nix
+++ b/system/nixos/home-proxy.nix
@@ -4,9 +4,14 @@
   services.nginx.streamConfig = ''
     resolver 1.1.1.1 ipv6=off;
 
+    upstream home {
+      server ${secret.nginx.upstream.home.hostname}:${builtins.toString(secret.nginx.upstream.home.port)};
+    }
+
     server {
-      listen 0.0.0.0:${builtins.toString(secret.nginx.upstream.home.port)};
-      proxy_pass ${secret.nginx.upstream.home.hostname}:${builtins.toString(secret.nginx.upstream.home.port)};
+      listen ${builtins.toString(secret.nginx.upstream.home.port)};
+      proxy_protocol on;
+      proxy_pass home;
     }
   '';