From 507971b7d4e2f228d3e5e0a33ba6acb3c673f7a7 Mon Sep 17 00:00:00 2001
From: Alexandre <44178713+alexbelgium@users.noreply.github.com>
Date: Wed, 30 Jul 2025 14:50:49 +0200
Subject: [PATCH] Create ingress.conf

---
 omni-tools/rootfs/ingress.conf | 27 +++++++++++++++++++++++++++
 1 file changed, 27 insertions(+)
 create mode 100644 omni-tools/rootfs/ingress.conf

diff --git a/omni-tools/rootfs/ingress.conf b/omni-tools/rootfs/ingress.conf
new file mode 100644
index 000000000..24b304bdd
--- /dev/null
+++ b/omni-tools/rootfs/ingress.conf
@@ -0,0 +1,27 @@
+   server {
+    listen %%interface%%:%%port%% default_server;
+    include /etc/nginx/includes/server_params.conf;
+    include /etc/nginx/includes/proxy_params.conf;
+    proxy_buffering off;
+
+    location / {
+      # Proxy pass
+      proxy_pass http://127.0.0.1:80;
+
+      # Allow downloading fragments
+      proxy_set_header Range $http_range;
+      proxy_set_header If-Range $http_if_range;
+
+      # Next three lines allow websockets
+      proxy_http_version 1.1;
+      proxy_set_header Upgrade $http_upgrade;
+      proxy_set_header Connection "upgrade";
+
+      proxy_hide_header X-Powered-By;
+      add_header X-Xss-Protection "1; mode=block";
+      add_header X-Content-Type-Options "nosniff";
+      add_header Strict-Transport-Security "max-age=2592000; includeSubdomains";
+      add_header X-Frame-Options "SAMEORIGIN";
+      add_header 'Referrer-Policy' 'no-referrer';
+      }
+}