From f8b33bb54183f9570ecee31d642d44c61b67af79 Mon Sep 17 00:00:00 2001
From: Jaculabilis <jaculabilis@git.alogoulogoi.com>
Date: Tue, 11 Mar 2025 04:46:57 +0000
Subject: [PATCH] empyrean: why are websockets? just to suffer?

---
 machine/empyrean/default.nix | 13 +++++++++++++
 1 file changed, 13 insertions(+)

diff --git a/machine/empyrean/default.nix b/machine/empyrean/default.nix
index 52f90a9..c313fb3 100644
--- a/machine/empyrean/default.nix
+++ b/machine/empyrean/default.nix
@@ -107,10 +107,23 @@
         enableACME = true;
         forceSSL = true;
         locations."/".proxyPass = "http://10.22.20.8:2283";
+        locations."/api/socket.io" = {
+          proxyPass = "http://10.22.20.8:2283";
+          extraConfig = ''
+            proxy_set_header Upgrade $http_upgrade;
+            proxy_set_header Connection "upgrade";
+          '';
+        };
         extraConfig = ''
+          client_max_body_size 50000M;
           # enable mTLS
           ssl_verify_client on;
           ssl_client_certificate /etc/nginx/client-ca.crt;
+          # other proxy settings
+          proxy_read_timeout 600s;
+          proxy_send_timeout 600s;
+          send_timeout 600s;
+          access_log /var/log/nginx/access_immich.log;
         '';
       };
       # mirror revproxy