Add missing headers to avoid CSRF errors

This commit is contained in:
Stefan Bethke 2024-10-08 20:28:56 +02:00
parent 43ca24b5e2
commit 2fc54f5a83

View file

@ -35,6 +35,10 @@ server {
# is transparent). # is transparent).
# Also provide "_hidden" for by, since it's not relevant. # Also provide "_hidden" for by, since it's not relevant.
proxy_set_header Forwarded "for=$remote_addr;proto=https;host=$host;by=_hidden"; proxy_set_header Forwarded "for=$remote_addr;proto=https;host=$host;by=_hidden";
proxy_read_timeout 86400;
proxy_set_header Upgrade $http_upgrade;
proxy_set_header Connection "Upgrade";
proxy_set_header CLIENT_IP $remote_addr;
location ~/(ticket/zoom/.*) { location ~/(ticket/zoom/.*) {
return 302 https://zammad.hamburg.ccc.de/#$1; return 302 https://zammad.hamburg.ccc.de/#$1;