From 4df3457aa8aba4f9909842f413f55d21aa3116ea Mon Sep 17 00:00:00 2001
From: Atridad Lahiji <me@atri.dad>
Date: Fri, 13 Feb 2026 10:29:18 -0700
Subject: [PATCH] Update nginx.nix

---
 modules/nginx.nix | 12 ++++++++++--
 1 file changed, 10 insertions(+), 2 deletions(-)

diff --git a/modules/nginx.nix b/modules/nginx.nix
index 6cd620c..3bf3c7c 100644
--- a/modules/nginx.nix
+++ b/modules/nginx.nix
@@ -396,8 +396,16 @@ in
         forceSSL = true;
 
         # lk-jwt-service (handles its own CORS)
-        locations."~ ^(/sfu/get|/healthz)" = {
-          priority = 400;
+        locations."/sfu/get" = {
+          proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
+          extraConfig = ''
+            proxy_set_header Host $host;
+            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+            proxy_set_header X-Forwarded-Proto $scheme;
+          '';
+        };
+        locations."/healthz" = {
           proxyPass = "http://[::1]:${toString config.services.lk-jwt-service.port}";
           extraConfig = ''
             proxy_set_header Host $host;