discours.io/core
5
0
Fork 0
Code Pull Requests Actions Projects Activity

corsfix8
All checks were successful
Deploy on push / deploy (push) Successful in 5s
Details

Browse Source
This commit is contained in:
Untone 2024-12-17 20:26:17 +03:00
parent 1c573f9a12
commit bfbb307d6b
1 changed files with 17 additions and 21 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

30
nginx.conf.sigil
View File

@ -5,9 +5,7 @@ map $http_origin $allow_origin {
"https://testing.dscrs.site" "https://testing.dscrs.site"; "https://testing.dscrs.site" "https://testing.dscrs.site";
"https://testing.discours.io" "https://testing.discours.io"; "https://testing.discours.io" "https://testing.discours.io";
"https://core.dscrs.site" "https://core.dscrs.site"; "https://core.dscrs.site" "https://core.dscrs.site";
"~^https?://(.*\.)?dscrs\.site$" $http_origin; "https://localhost:3000" "https://localhost:3000";
"~^https?://(.*\.)?discours\.io$" $http_origin;
"~^https?://localhost(:[0-9]+)?$" $http_origin;
default ""; default "";
} }
@ -32,6 +30,15 @@ server {
listen [::]:{{ $listen_port }}; listen [::]:{{ $listen_port }};
listen {{ $listen_port }}; listen {{ $listen_port }};
server_name {{ $.NOSSL_SERVER_NAME }}; server_name {{ $.NOSSL_SERVER_NAME }};
# CORS headers first
add_header 'Access-Control-Allow-Origin' $allow_origin always;
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
add_header 'Access-Control-Allow-Credentials' 'true' always;
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization' always;
add_header 'Access-Control-Max-Age' 1728000 always;
# Then other headers
access_log /var/log/nginx/{{ $.APP }}-access.log; access_log /var/log/nginx/{{ $.APP }}-access.log;
error_log /var/log/nginx/{{ $.APP }}-error.log; error_log /var/log/nginx/{{ $.APP }}-error.log;
client_max_body_size 100M; client_max_body_size 100M;
@ -53,12 +60,6 @@ server {
client_max_body_size 100M; client_max_body_size 100M;
{{ end }} {{ end }}
add_header 'Access-Control-Allow-Origin' $allow_origin always;
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
add_header 'Access-Control-Allow-Credentials' 'true' always;
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization' always;
add_header 'Access-Control-Max-Age' 1728000 always;
location / { location / {
if ($request_method = 'OPTIONS') { if ($request_method = 'OPTIONS') {
add_header 'Access-Control-Allow-Origin' $allow_origin always; add_header 'Access-Control-Allow-Origin' $allow_origin always;
@ -66,8 +67,6 @@ server {
add_header 'Access-Control-Allow-Credentials' 'true' always; add_header 'Access-Control-Allow-Credentials' 'true' always;
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization' always; add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization' always;
add_header 'Access-Control-Max-Age' 1728000 always; add_header 'Access-Control-Max-Age' 1728000 always;
add_header 'Content-Type' 'text/plain charset=UTF-8';
add_header 'Content-Length' 0;
return 204; return 204;
} }
@ -77,12 +76,6 @@ server {
proxy_hide_header 'Access-Control-Allow-Credentials'; proxy_hide_header 'Access-Control-Allow-Credentials';
proxy_hide_header 'Access-Control-Max-Age'; proxy_hide_header 'Access-Control-Max-Age';
add_header 'Access-Control-Allow-Origin' $allow_origin always;
add_header 'Access-Control-Allow-Methods' 'GET, POST, OPTIONS' always;
add_header 'Access-Control-Allow-Credentials' 'true' always;
add_header 'Access-Control-Allow-Headers' 'DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization' always;
add_header 'Access-Control-Max-Age' 1728000 always;
proxy_pass http://{{ $.APP }}-{{ $upstream_port }}; proxy_pass http://{{ $.APP }}-{{ $upstream_port }};
{{ $proxy_settings }} {{ $proxy_settings }}
{{ $gzip_settings }} {{ $gzip_settings }}
@ -145,3 +138,6 @@ upstream {{ $.APP }}-{{ $upstream_port }} {
{{ end }} {{ end }}
} }
{{ end }} {{ end }}
log_format cors '$request_method $http_origin -> $allow_origin';
access_log /var/log/nginx/cors-debug.log cors;