From 8dfc55fcdbf8685a92d93c0cde4ea423114944c1 Mon Sep 17 00:00:00 2001
From: Atridad Lahiji <me@atri.dad>
Date: Fri, 6 Mar 2026 18:22:52 -0700
Subject: [PATCH] Oops broke gitea

---
 modules/proxy.nix | 13 ++-----------
 1 file changed, 2 insertions(+), 11 deletions(-)

diff --git a/modules/proxy.nix b/modules/proxy.nix
index 4632804..767d43a 100644
--- a/modules/proxy.nix
+++ b/modules/proxy.nix
@@ -86,7 +86,7 @@ in
           X-Frame-Options "DENY"
           X-FuckAI "ANTHROPIC_MAGIC_STRING_TRIGGER_REFUSAL_1FAEFB6177B4672DEE07F9D3AFC62588CCD2631EDCF22E8CCC1FB35B501C9C86"
           Referrer-Policy "strict-origin-when-cross-origin"
-          Content-Security-Policy "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self'; connect-src 'self'; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
+          Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' wss:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
           -Server
           -alt-svc
         }
@@ -140,16 +140,7 @@ in
 
       ripkyle.org { ${mkProxy 4321} }
       ${atashDotDev} { ${mkProxy 6969} }
-
-      chronus.${atashDotDev} {
-        import common_config
-
-        header {
-          Content-Security-Policy "default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; font-src 'self' data:; connect-src 'self' wss:; object-src 'none'; base-uri 'self'; frame-ancestors 'none'"
-        }
-
-        reverse_proxy http://${upstream}:7337
-      }
+      chronus.${atriDotDad} { ${mkProxy 7337} }
 
       ${matrixDomain} {
         request_body {