Deps

modules/nginx.nix

@@ -35,9 +35,6 @@ let
     locations."/" = {
       proxyPass = "http://${upstream}:${toString port}";
       proxyWebsockets = true;
-      # NOTE: `if` inside a location block is unsafe in general (nginx docs warn
-      # against it), but is safe here because the only statement is `return`.
-      # Do NOT add any other directives inside this if block.
       extraConfig = "if ($fuckai) { return 444; }";
     };
   };
@@ -150,8 +147,6 @@ in
         forceSSL = true;
         locations."/" = {
           proxyPass = "http://${upstream}:3000";
-          # NOTE: `if` is safe here because the only statement is `return`.
-          # Do NOT add other directives inside this if block.
           extraConfig = "if ($fuckai) { return 444; }";
         };
         locations."= /.well-known/matrix/server" = {
@@ -227,8 +222,7 @@ in
             client_max_body_size 100M;
           '';
         };
-        # Only forward the three known lk-jwt-service endpoints; reject everything
-        # else (including path traversal sequences) with 404.
+
         locations."^~ /livekit/jwt/" = {
           priority = 400;
           extraConfig = ''