movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-12 20:55:31 +03:00
Code Issues Projects Releases Packages Wiki Activity

nixos/nginx: clear clients Connection headers

Browse source
This commit is contained in:
Sandro Jäckel 2022-10-15 17:18:36 +02:00
parent 5b6dcece88
commit 2d3efd3301
No known key found for this signature in database
GPG key ID: 3AF5A43A3EECC2E5
3 changed files with 11 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

7
nixos/doc/manual/from_md/release-notes/rl-2305.section.xml
View file

@ -702,6 +702,13 @@
<literal>hipcc</literal>. <literal>hipcc</literal>.
</para> </para>
</listitem> </listitem>
<listitem>
<para>
<literal>services.nginx.recommendedProxySettings</literal> now
removes the <literal>Connection</literal> header preventing
clients from closing backend connections.
</para>
</listitem>
<listitem> <listitem>
<para> <para>
Resilio sync secret keys can now be provided using a secrets Resilio sync secret keys can now be provided using a secrets

2
nixos/doc/manual/release-notes/rl-2305.section.md
View file

@ -176,6 +176,8 @@ In addition to numerous new and upgraded packages, this release has the followin
- `hip` has been separated into `hip`, `hip-common` and `hipcc`. - `hip` has been separated into `hip`, `hip-common` and `hipcc`.
- `services.nginx.recommendedProxySettings` now removes the `Connection` header preventing clients from closing backend connections.
- Resilio sync secret keys can now be provided using a secrets file at runtime, preventing these secrets from ending up in the Nix store. - Resilio sync secret keys can now be provided using a secrets file at runtime, preventing these secrets from ending up in the Nix store.
- The `firewall` and `nat` module now has a nftables based implementation. Enable `networking.nftables` to use it. - The `firewall` and `nat` module now has a nftables based implementation. Enable `networking.nftables` to use it.

2
nixos/modules/services/web-servers/nginx/default.nix
View file

@ -211,6 +211,8 @@ let
proxy_send_timeout ${cfg.proxyTimeout}; proxy_send_timeout ${cfg.proxyTimeout};
proxy_read_timeout ${cfg.proxyTimeout}; proxy_read_timeout ${cfg.proxyTimeout};
proxy_http_version 1.1; proxy_http_version 1.1;
# don't let clients close the keep-alive connection to upstream
proxy_set_header "Connection" "";
include ${recommendedProxyConfig}; include ${recommendedProxyConfig};
''} ''}