From 70edda5c0cd44a6e6976d24266b7c2017fd5aa6e Mon Sep 17 00:00:00 2001
From: Alejandro Soto <alejandro@34project.org>
Date: Sun, 28 Jul 2024 23:48:45 -0600
Subject: sys/web/sites/home: disable client cert requirement

---
 sys/web/sites/home.nix | 15 +++++----------
 1 file changed, 5 insertions(+), 10 deletions(-)

diff --git a/sys/web/sites/home.nix b/sys/web/sites/home.nix
index 74f698c..616bf94 100644
--- a/sys/web/sites/home.nix
+++ b/sys/web/sites/home.nix
@@ -22,18 +22,13 @@ in
       forceSSL = true;
       useACMEHost = domains.home.main;
 
-      extraConfig = ''
-        ssl_verify_depth 2;
-        ssl_verify_client on;
-        ssl_client_certificate ${config.local.pki.ca.home.fullchain};
-
-        if ($ssl_client_verify != "SUCCESS") {
-          return 403;
-        }
-      '';
-
       locations."/".extraConfig = ''
         proxy_pass ${cfg.proxyUrl};
+        proxy_redirect http:// https://;
+
+        # Necesario debido a websockets
+        proxy_set_header Upgrade $http_upgrade;
+        proxy_set_header Connection $connection_upgrade;
       '';
     };
   };
-- 
cgit v1.2.3