From 42c46a5645e45029ca08ac4264cbb80dce26da0e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?R=C3=A2u=20Cao?= <raucao@kosmos.org>
Date: Tue, 11 Jun 2024 22:54:12 +0200
Subject: [PATCH] Deploy strfry reverse proxy

---
 nodes/fornax.kosmos.org.json                                 | 1 +
 site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb | 3 ---
 2 files changed, 1 insertion(+), 3 deletions(-)

diff --git a/nodes/fornax.kosmos.org.json b/nodes/fornax.kosmos.org.json
index bc81069..d5903f9 100644
--- a/nodes/fornax.kosmos.org.json
+++ b/nodes/fornax.kosmos.org.json
@@ -48,6 +48,7 @@
       "kosmos_liquor-cabinet::nginx",
       "kosmos_rsk::nginx_testnet",
       "kosmos_rsk::nginx_mainnet",
+      "kosmos_strfry::nginx",
       "kosmos_website",
       "kosmos_website::default",
       "kosmos-akkounts::nginx",
diff --git a/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb b/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb
index a9fb157..2f8cee7 100644
--- a/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb
+++ b/site-cookbooks/kosmos_strfry/templates/nginx_conf_strfry.erb
@@ -6,7 +6,6 @@ upstream _strfry {
 
 server {
   listen <%= "#{node['openresty']['listen_ip']}:" if node['openresty']['listen_ip'] %>443 ssl http2;
-  listen [::]:443 ssl http2;
   server_name <%= @domain %>;
 
   access_log "/var/log/nginx/<%= @domain %>.access.log";
@@ -17,8 +16,6 @@ server {
 
   location / {
     proxy_set_header Host $host;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-    proxy_set_header X-Forwarded-Proto https;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_pass http://_strfry;
     proxy_http_version 1.1;