sys/web/sites/home: disable client cert requirement

1 files changed, 5 insertions, 10 deletions

diff --git a/sys/web/sites/home.nix b/sys/web/sites/home.nix
index 74f698c..616bf94 100644
--- a/sys/web/sites/home.nix
+++ b/sys/web/sites/home.nix
@@ -22,18 +22,13 @@ in
       forceSSL = true;
       useACMEHost = domains.home.main;
 
-      extraConfig = ''
-        ssl_verify_depth 2;
-        ssl_verify_client on;
-        ssl_client_certificate ${config.local.pki.ca.home.fullchain};
-
-        if ($ssl_client_verify != "SUCCESS") {
-          return 403;
-        }
-      '';
-
       locations."/".extraConfig = ''
         proxy_pass ${cfg.proxyUrl};
+        proxy_redirect http:// https://;
+
+        # Necesario debido a websockets
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
       '';
     };
   };