From 91775e2b63ccdbbf4b7e3b19c8041ae472979477 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Sandro=20J=C3=A4ckel?= <sandro.jaeckel@gmail.com>
Date: Sun, 1 Jan 2023 21:47:11 +0100
Subject: [PATCH] Escape ipv6 properly

---
 modules/nginx.nix | 9 ++++++++-
 1 file changed, 8 insertions(+), 1 deletion(-)

diff --git a/modules/nginx.nix b/modules/nginx.nix
index c2afe92..6d08bcd 100644
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@@ -32,7 +32,14 @@ in
         recommendedOptimisation = true;
         recommendedProxySettings = true;
         recommendedTlsSettings = true;
-        resolver.addresses = lib.optionals (config.networking.nameservers != [ ]) config.networking.nameservers;
+        resolver.addresses = let
+          isIPv6 = addr: builtins.match ".*:.*:.*" addr != null;
+          escapeIPv6 = addr: if isIPv6 addr then
+            "[${addr}]"
+          else
+            addr;
+        in
+          lib.optionals (config.networking.nameservers != [ ]) (map escapeIPv6 config.networking.nameservers);
       }))
     ];