Escape ipv6 properly

2023-01-01 21:47:11 +01:00 · 2023-01-01 21:47:11 +01:00 · 91775e2b63
parent c637341236
commit 91775e2b63
1 changed files with 8 additions and 1 deletions
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@ -32,7 +32,14 @@ in
        recommendedOptimisation = true;
        recommendedProxySettings = true;
        recommendedTlsSettings = true;
-        resolver.addresses = lib.optionals (config.networking.nameservers != [ ]) config.networking.nameservers;
+        resolver.addresses = let
+          isIPv6 = addr: builtins.match ".*:.*:.*" addr != null;
+          escapeIPv6 = addr: if isIPv6 addr then
+            "[${addr}]"
+          else
+            addr;
+        in
+          lib.optionals (config.networking.nameservers != [ ]) (map escapeIPv6 config.networking.nameservers);
      }))
    ];