forked from
lass.pds.lassul.us/superconfig
This repository has no description
services.flix: pin flix upstream to yellow retiolum ip4
jellyfin only listens on IPv4, but yellow.r also resolves to its
retiolum AAAA. nginx round-robined both addresses, so requests
hitting the v6 upstream failed and poisoned the upstream group,
causing intermittent 502 'no live upstreams' on flix.lassul.us.
Also drop the stale duplicate flix vhost from container-host.nix.
author
lassulus
date
(Sep 1, 2026, 6:16 PM CEST)
commit
5933ac1c
5933ac1c250a1df55253881bcbe00443d79b552d
parent
871b865b
871b865bbc2acb7e884271dce86b1f2dd670031e
+5
-11
-9
2configs/services/flix/container-host.nix
-9
2configs/services/flix/container-host.nix
···
48
48
}
49
49
];
50
50
51
-
services.nginx.virtualHosts."flix.lassul.us" = {
52
-
# forceSSL = true;
53
-
# enableACME = true;
54
-
locations."/" = {
55
-
proxyPass = "http://yellow.r:8096";
56
-
proxyWebsockets = true;
57
-
recommendedProxySettings = true;
58
-
};
59
-
};
60
51
clan.core.vars.generators.yellow-container = {
61
52
files."yellow.sync.key" = { };
62
53
prompts.key.description = ''
+5
-2
2configs/services/flix/proxy.nix
+5
-2
2configs/services/flix/proxy.nix
···
1
-
{ pkgs, ... }:
1
+
{ config, pkgs, ... }:
2
2
{
3
3
# POST → ipfs-upload backend (writes file to /var/lib/ipfs/download/<path>
4
4
# and returns the CID). Anything else → the kubo gateway.
···
29
29
forceSSL = true;
30
30
enableACME = true;
31
31
locations."/" = {
32
-
proxyPass = "http://yellow.r:8096";
32
+
# jellyfin only listens on IPv4; yellow.r also resolves to its
33
+
# retiolum AAAA, which nginx round-robins into -> intermittent
34
+
# 502 "no live upstreams". Pin the v4 address.
35
+
proxyPass = "http://${config.krebs.hosts.yellow.nets.retiolum.ip4.addr}:8096";
33
36
proxyWebsockets = true;
34
37
recommendedProxySettings = true;
35
38
};