felschr/nixos-config
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix(vpn): disable IPv6 for nginx

Browse source 
Tailscale Mullvad exit nodes currently don't support IPv6 and this is
causing issues with nginx (proxy pass) requests timing out and high CPU load.
Until Mullvad exit nodes support IPv6, we'll just disable IPv6 for nginx.
This commit is contained in:
Felix Schröter 2025-02-14 00:21:21 +01:00
parent e964443c5d
commit 3e52c2b922
Signed by: felschr
GPG key ID: 671E39E6744C807D
1 changed files with 5 additions and 0 deletions

5
system/vpn.nix
View file

@ -56,4 +56,9 @@ in
sslCertificate = "/var/lib/tailscale/certs/${tailnetHost}.crt";
sslCertificateKey = "/var/lib/tailscale/certs/${tailnetHost}.key";
};
# TODO Tailscale Mullvad exit nodes currently don't support IPv6 and this is
# causing issues with nginx (proxy pass) requests timing out and high CPU load.
# Until Mullvad exit nodes support IPv6, we'll just disable IPv6 for nginx.
services.nginx.resolver.ipv6 = false;
}