From ed909897b3368e5531ade2f3762c854faa364a34 Mon Sep 17 00:00:00 2001
From: arcnmx <git@git.arcn.mx>
Date: Sun, 23 Jun 2024 14:59:59 -0700
Subject: [PATCH] fix(keycloak): large headers

---
 nixos/access/keycloak.nix | 8 ++++++--
 1 file changed, 6 insertions(+), 2 deletions(-)

diff --git a/nixos/access/keycloak.nix b/nixos/access/keycloak.nix
index 87d914cf..4696f88a 100644
--- a/nixos/access/keycloak.nix
+++ b/nixos/access/keycloak.nix
@@ -9,6 +9,10 @@
   locations."/".proxy.enable = true;
   name.shortServer = mkDefault "sso";
   copyFromVhost = mkDefault "keycloak";
+  extraConfig = ''
+    proxy_buffer_size 128k;
+    proxy_buffers 4 256k;
+  '';
 in {
   config.services.nginx = {
     upstreams'.${upstreamName}.servers = {
@@ -28,12 +32,12 @@ in {
     };
     virtualHosts = {
       keycloak = {
-        inherit name locations;
+        inherit name locations extraConfig;
         ssl.force = mkDefault true;
         proxy.upstream = mkDefault upstreamName;
       };
       keycloak'local = {
-        inherit name locations;
+        inherit name locations extraConfig;
         ssl = {
           force = mkDefault true;
           cert = {