From d96ef542d7815a917d57552d05cb97cdaf5eaec4 Mon Sep 17 00:00:00 2001
From: Luke Granger-Brown <hg@lukegb.com>
Date: Sat, 10 Apr 2021 19:22:54 +0000
Subject: [PATCH] etheroute-lon01: set X-Forwarded-Roles header for rundeck

---
 ops/nixos/etheroute-lon01/default.nix | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/ops/nixos/etheroute-lon01/default.nix b/ops/nixos/etheroute-lon01/default.nix
index 8aad190900..a74596ff40 100644
--- a/ops/nixos/etheroute-lon01/default.nix
+++ b/ops/nixos/etheroute-lon01/default.nix
@@ -247,7 +247,11 @@ in {
         })
         (service "bvm-twitterchiver:8080" "twitterchiver.int.lukegb.com" {})
         (service "bvm-twitterchiver:8080" "twitterchiver.lukegb.com" {})
-        (service "bvm-nixosmgmt:4440" "rundeck.int.lukegb.com" {})
+        (service "bvm-nixosmgmt:4440" "rundeck.int.lukegb.com" {
+          set_request_headers = {
+            "X-Forwarded-Roles" = "pomerium";
+          };
+        })
       ];
     };
   };