webgateway/nginx: set HTTP version to 1.1 (before: 1.0) and timeouts to 60s
(before: 90s) in recommendedProxySettings which are enabled by default.
The timeout can be changed via the new services.nginx.proxyTimeout
option. The switch to HTTP/1.1 fixes HTTP 413 responses from haproxy when
Nginx passes a GET requests with a request body. haproxy stopped to accept
these requests via HTTP/1.0 starting with version 2.5 because they could be
a security risk. You may want to check plain nginx config in
/etc/local/nginx and change these settings accordingly or remove them to
use the defaults (#PL-130875).
Fix a logrotate config check failure when extraRules are defined but no
separateFacilities (#PL-130890).
Improve init process for new machines which fixes an issue with unusable
machines bootstrapped on 22.05 in production. The changes also increase
reliability of the process and shortens the time until a VM reaches desired
states. SSH access to new machines now works earlier (using an IP address,
DNS may still take some time for new machines) (#PL-130893).
Write state version (currently equal to the platform version: 22.05) to
/etc/local/nixos/state_version. This has no effect for now but allows us
to manage platform upgrades better in the future (#PL-130893).
Fix broken httpd.service and nginx.service unit files when the services
are not enabled. This caused confusing ("has a bad unit file setting")
error messages (#PL-130503).
Pull upstream NixOS changes that include security fixes and other updates (#PL-130892):
Write state version (currently equal to the platform version: 21.11) to
/etc/local/nixos/state_version. This has no effect for now but allows us
to manage platform upgrades better in the future (#PL-130893).