From 310723a18c194627864c323d1b712db09408d194 Mon Sep 17 00:00:00 2001
From: teutat3s <teutates@mailbox.org>
Date: Sat, 28 Oct 2023 22:52:57 +0200
Subject: [PATCH] fix: nginx tls connection to upstream

---
 hosts/nachtigall/apps/nginx-mastodon-files.nix | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/hosts/nachtigall/apps/nginx-mastodon-files.nix b/hosts/nachtigall/apps/nginx-mastodon-files.nix
index 9b43cf6..8ca4499 100644
--- a/hosts/nachtigall/apps/nginx-mastodon-files.nix
+++ b/hosts/nachtigall/apps/nginx-mastodon-files.nix
@@ -42,6 +42,8 @@ in
             proxy_ignore_headers Set-Cookie;
             proxy_pass https://${objStorHost}/${objStorBucket}$request_uri?download;
             proxy_intercept_errors off;
+            proxy_ssl_protocols TLSv1.2 TLSv1.3;
+            proxy_ssl_server_name on;
 
             proxy_cache cache;
             proxy_cache_valid 200 48h;