From 85fc60162c92bdb5dabda77ccea26b6bcd9e6696 Mon Sep 17 00:00:00 2001
From: Natsu Kagami <nki@nkagami.me>
Date: Wed, 30 Aug 2023 20:20:49 +0200
Subject: [PATCH] Put headscale past cloudflare

---
 nki-personal-do/headscale.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/nki-personal-do/headscale.nix b/nki-personal-do/headscale.nix
index cf662ce..b342e11 100644
--- a/nki-personal-do/headscale.nix
+++ b/nki-personal-do/headscale.nix
@@ -18,6 +18,8 @@ rec {
     filter = "Host(`hs.dtth.ch`) && !PathPrefix(`/admin`)";
     noCloudflare = true;
   };
+  # cloud.traefik.config.http.middlewares.hs-sslheader.headers.customrequestheaders.X-Forwarded-Proto = "https";
+  # cloud.traefik.config.http.routers.headscale-router.middlewares = [ "hs-sslheader" ];
   cloud.traefik.hosts.headscale_webui = {
     inherit host;
     port = webuiPort;