173 current 2025-10-09 15:48:55 25.05.20251006.20c4598 6.12.50 *

modules/homelab/services/immich/default.nix

@@ -81,6 +81,7 @@ in
       sslCertificateKey = sec."ssl_blakedheld_key".path;
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString cfg.port}";
+        proxyWebsockets = true;
       };
     };
      # external reverse proxy entry
@@ -91,15 +92,6 @@ in
       locations."/" = {
         proxyPass = "http://127.0.0.1:${toString cfg.port}";
         proxyWebsockets = true;
-        extraConfig =
-          # required when the target is also TLS server with multiple hosts
-          "proxy_ssl_server_name on;" +
-          # required when the server wants to use HTTP Authentication
-          "proxy_pass_header Authorization;" +
-          "proxy_http_version 1.1;" +
-          "proxy_set_header Upgrade $http_upgrade;" +
-          "proxy_set_header Connection "upgrade";"
-          ;
       };
     };