hosts/nachtigall/apps/keycloak.nix

@@ -25,6 +25,7 @@
       "/" = {
         extraConfig = ''
           proxy_pass http://127.0.0.1:8080;
+          proxy_buffer_size 8k;
         '';
       };
     };

hosts/nachtigall/apps/nginx.nix

@@ -19,6 +19,10 @@ in {
     recommendedOptimisation = true;
     recommendedProxySettings = true;
     recommendedTlsSettings = true;
+    appendHttpConfig = ''
+      # https://nginx.org/en/docs/hash.html
+      proxy_headers_hash_max_size 1024;
+    '';
   };
   
   security.acme = {