avm/hassio-addons
1
0
Fork 0
mirror of https://github.com/alexbelgium/hassio-addons.git synced 2026-08-19 03:17:19 +02:00
Code Issues Packages Projects Releases Wiki Activity

fix(claude_desktop): proxy Selkies API websocket in ingress

Browse Source
This commit is contained in:
Alexandre
2026-07-16 17:41:00 +02:00
parent 3d2f3aa193
commit 32765daf99
1 changed files with 90 additions and 19 deletions
Download Patch File Download Diff File Expand all files Collapse all files

109
claude_desktop/rootfs/etc/cont-init.d/90-ingress.sh
View File

@@ -4,34 +4,105 @@ set -e
NGINX_CONFIG=/etc/nginx/sites-available/ingress.conf
SUBFOLDER="$(bashio::addon.ingress_entry)"
INGRESS_PORT="$(bashio::addon.ingress_port)"
DOWNLOADS_PATH="${HOME:-/config}"
# Ensure subfolder ends with a trailing slash (except for root)
# Home Assistant normally strips the ingress prefix before forwarding to the add-on,
# but keep the normalized value available for diagnostics and future-safe logging.
if [[ -n "${SUBFOLDER}" && "${SUBFOLDER}" != "/" ]]; then
[[ "${SUBFOLDER}" == */ ]] || SUBFOLDER="${SUBFOLDER}/"
else
SUBFOLDER="/"
fi
cp /defaults/default.conf "${NGINX_CONFIG}"
# Claude Desktop exposes only 3001/tcp in config.yaml. Older Supervisor/bashio
# combinations can return an empty ingress_port when it is not explicit, which would
# make nginx write an invalid `listen` directive. Fall back to the declared port.
if [[ -z "${INGRESS_PORT}" ]]; then
INGRESS_PORT="3001"
fi
# Keep only the first (non-SSL) server block
awk -v n=2 '/^[[:space:]]*server[[:space:]]*\{/{n--} n>0' "${NGINX_CONFIG}" > tmpfile
mv tmpfile "${NGINX_CONFIG}"
DOWNLOADS_PATH="${DOWNLOADS_PATH%/}"
# Disable IPv6 listeners for ingress proxying
sed -i '/listen \[::\]/d' "${NGINX_CONFIG}"
cat > "${NGINX_CONFIG}" <<EOF
server {
listen ${INGRESS_PORT} default_server;
client_max_body_size 10M;
# Adapt ports and upstream paths for Home Assistant ingress
sed -i "s|3000|$(bashio::addon.ingress_port)|g" "${NGINX_CONFIG}"
sed -i "s|SUBFOLDER|/|g" "${NGINX_CONFIG}"
sed -i "s|CWS|8082|g" "${NGINX_CONFIG}"
sed -i "s|REPLACE_HOME|${HOME:-/root}|g" "${NGINX_CONFIG}"
sed -i "s|REPLACE_DOWNLOADS_PATH|${HOME:-/config}|g" "${NGINX_CONFIG}"
sed -i '/proxy_buffering/a proxy_set_header Accept-Encoding "";' "${NGINX_CONFIG}"
sed -i '/proxy_buffering/a sub_filter_once off;' "${NGINX_CONFIG}"
sed -i '/proxy_buffering/a sub_filter_types *;' "${NGINX_CONFIG}"
sed -i '/proxy_buffering/a sub_filter "vnc/index.html?autoconnect" "vnc/index.html?path=%%path%%/websockify?autoconnect";' "${NGINX_CONFIG}"
sed -i "s|%%path%%|${SUBFOLDER:1}|g" "${NGINX_CONFIG}"
location / {
alias /usr/share/selkies/web/;
index index.html index.htm;
try_files \$uri \$uri/ /index.html;
}
location /devmode {
proxy_set_header Upgrade \$http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host \$host;
proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme;
proxy_http_version 1.1;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
proxy_connect_timeout 3600s;
proxy_buffering off;
proxy_set_header Accept-Encoding "";
proxy_pass http://127.0.0.1:5173;
}
# Current Selkies WebSocket mode connects to <base>/api/websockets.
# The older linuxserver default.conf only proxies /websocket, leaving the
# dashboard loaded but stuck on "waiting for stream" under Home Assistant ingress.
location /api/ {
proxy_set_header Upgrade \$http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host \$host;
proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme;
proxy_http_version 1.1;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
proxy_connect_timeout 3600s;
proxy_buffering off;
proxy_set_header Accept-Encoding "";
proxy_pass http://127.0.0.1:8082;
}
# Keep compatibility with older Selkies/noVNC clients and linuxserver templates.
location /websocket {
proxy_set_header Upgrade \$http_upgrade;
proxy_set_header Connection "upgrade";
proxy_set_header Host \$host;
proxy_set_header X-Real-IP \$remote_addr;
proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto \$scheme;
proxy_http_version 1.1;
proxy_read_timeout 3600s;
proxy_send_timeout 3600s;
proxy_connect_timeout 3600s;
proxy_buffering off;
proxy_set_header Accept-Encoding "";
proxy_pass http://127.0.0.1:8082;
}
location /files {
fancyindex on;
fancyindex_footer /nginx/footer.html;
fancyindex_header /nginx/header.html;
alias ${DOWNLOADS_PATH}/;
if (-f \$request_filename) {
add_header Content-Disposition "attachment";
add_header X-Content-Type-Options "nosniff";
}
}
error_page 500 502 503 504 /50x.html;
location = /50x.html {
root /usr/share/selkies/web/;
}
}
EOF
# Avoid content encoding on proxied responses to keep Selkies happy (handled by proxy_set_header Accept-Encoding insertion above)
cp "${NGINX_CONFIG}" /etc/nginx/sites-enabled