diff --git a/tandoor_recipes/rootfs/etc/nginx/servers/ingress.conf b/tandoor_recipes/rootfs/etc/nginx/servers/ingress.conf index d213068fe..34e0578de 100644 --- a/tandoor_recipes/rootfs/etc/nginx/servers/ingress.conf +++ b/tandoor_recipes/rootfs/etc/nginx/servers/ingress.conf @@ -12,6 +12,8 @@ server { proxy_set_header Upgrade $http_upgrade; proxy_set_header Host $http_host; # try $host instead if this doesn't work proxy_set_header X-Forwarded-Proto $scheme; # http or https + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; # Allow ingress subpath proxy_set_header X-Script-Name %%ingress_entry%%; @@ -20,13 +22,11 @@ server { # Rewrite url sub_filter_once off; sub_filter_types *; - sub_filter "/static/" "%%ingress_entry%%/static/"; + sub_filter "/static" "%%ingress_entry%%/static"; sub_filter "/media" "%%ingress_entry%%/media"; - sub_filter "/view" "%%ingress_entry%%/view"; - sub_filter "/search" "%%ingress_entry%%/search"; - sub_filter "/edit/" "%%ingress_entry%%/edit/"; - #sub_filter "/api/" "%%ingress_entry%%/api/"; - #sub_filter "%%ingress_entry%%/api/hassio/" "/api/hassio/"; + #sub_filter "/view" "%%ingress_entry%%/view"; + #sub_filter "/search" "%%ingress_entry%%/search"; + #sub_filter "/edit/" "%%ingress_entry%%/edit/"; # Allow frames proxy_hide_header "Content-Security-Policy";