From 0a6dd02620e291bf2e88ac583b8ba56340e43ae6 Mon Sep 17 00:00:00 2001
From: Robert Obryk <robryk@gmail.com>
Date: Sun, 5 Feb 2023 23:11:37 +0100
Subject: [PATCH] nixos/firefox-syncserver: enable recommendedProxySettings

The syncserver requires a Host header identical to the one provided by
the client.
---
 nixos/modules/services/networking/firefox-syncserver.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nixos/modules/services/networking/firefox-syncserver.nix b/nixos/modules/services/networking/firefox-syncserver.nix
index a06b9573a850..42924d7f6993 100644
--- a/nixos/modules/services/networking/firefox-syncserver.nix
+++ b/nixos/modules/services/networking/firefox-syncserver.nix
@@ -304,6 +304,10 @@ in
         forceSSL = cfg.singleNode.enableTLS;
         locations."/" = {
           proxyPass = "http://127.0.0.1:${toString cfg.settings.port}";
+          # We need to pass the Host header that matches the original Host header. Otherwise,
+          # Hawk authentication will fail (because it assumes that the client and server see
+          # the same value of the Host header).
+          recommendedProxySettings = true;
         };
       };
     };