configs/nixos/hosts/pikachu/default.nix

@@ -174,6 +174,7 @@
         domain = "files.alexion.dev";
         protocol = "https";
         port = 3923;
+        clientMaxBodySize = "1g";
       };
       trustedSources = [ "${registry.address.${config.networking.hostName}."reverse-proxy"}/32" ];
     };

configs/nixos/modules/services/reverse-proxy.nix

@@ -99,6 +99,9 @@ let
       value = {
         forceSSL = !isHttp;
         enableACME = !isHttp;
+        extraConfig = lib.optionalString (route.clientMaxBodySize != null) ''
+          client_max_body_size ${route.clientMaxBodySize};
+        '';
         locations."/".proxyPass = mkBackend address port;
       };
     };

configs/nixos/registry/route.nix

@@ -29,6 +29,12 @@
         );
       message = "UDP routes must set ports and not port.";
     }
+    {
+      assertion =
+        entries:
+        lib.all (entry: entry.value.protocol != "udp" || entry.value.clientMaxBodySize == null) entries;
+      message = "UDP routes must not set clientMaxBodySize.";
+    }
   ];
 
   type = lib.types.submodule {
@@ -64,6 +70,13 @@
         ];
         description = "Sets the UDP ports for a UDP route.";
       };
+
+      clientMaxBodySize = lib.mkOption {
+        type = lib.types.nullOr lib.types.str;
+        default = null;
+        example = "1g";
+        description = "Maximum HTTP request body the reverse proxy accepts.";
+      };
     };
   };
 }