update production

Changes from develop since 2022-05-23T16:19:20+00:00

Deployment Notes

Included Merge Requests

• !309 (merged)
• !307 (merged)
• !308 (merged)
• !306 (merged)

Diff Stat

nixos/modules/issuer.nix

@@ -254,6 +254,17 @@ in {
           # we pass less scanning spam on to our backend
           # Want a regex instead? try locations."~ /v\d+/"
           proxyPass = "http://127.0.0.1:${internalHttpPort}";
+
+          # The redemption endpoint can intentionally delay its response for
+          # up to 600 seconds for a cheap kind of server-push when payment
+          # completes.  Let that timeout control how long the connection stays
+          # open.  PaymentServer does not accept configuration for that
+          # duration so we also hard-code it here.
+          #
+          # http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_read_timeout
+          extraConfig = ''
+            proxy_read_timeout 660;
+          '';
         };
         locations."/metrics" = {
           # Only allow our monitoringvpn subnet