diff --git a/roles/nginx/tasks/main.yml b/roles/nginx/tasks/main.yml index 2283731..596f446 100644 --- a/roles/nginx/tasks/main.yml +++ b/roles/nginx/tasks/main.yml @@ -38,12 +38,18 @@ ssl_ciphers HIGH:!aNULL:!MD5; - listen: "443 ssl http2" server_name: "git.{{ domain }}" - client_max_body_size: "100M" + client_max_body_size: "512M" extra_parameters: | listen [::]:443 ssl http2; location / { add_header Permissions-Policy interest-cohort=(); proxy_pass http://localhost:{{ giteaPort }}; + proxy_set_header Connection $http_connection; + proxy_set_header Upgrade $http_upgrade; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; } ssl_certificate /etc/letsencrypt/live/{{ domain }}/fullchain.pem; ssl_certificate_key /etc/letsencrypt/live/{{ domain }}/privkey.pem;