colin/nix-files
1
0
Fork 1
Code Issues Pull Requests Projects Releases Wiki Activity

lemmy: restrict the http_accept types i forward to the backend

Browse Source 
it seems that forwarding `POST`s is the important part i was missing earlier
This commit is contained in:
Colin 2023-05-12 03:05:26 +00:00
parent 04e8e72ae3
commit 6ff2c8acae
1 changed files with 9 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

18
hosts/by-name/servo/services/lemmy.nix
View File

@ -69,17 +69,17 @@ in {
proxyPass = "$proxpass";
extraConfig = ''
set $proxpass "${ui}";
# if ($http_accept = "application/activity+json") {
# set $proxpass "${backend}";
# }
# if ($http_accept = "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"") {
# set $proxpass "${backend}";
# }
# XXX: lemmy-ansible nginx uses this maximally broad redirection
if ($http_accept ~ "^application/.*$") {
if ($http_accept = "application/activity+json") {
set $proxpass "${backend}";
}
if ($http_accept = "application/ld+json; profile=\"https://www.w3.org/ns/activitystreams\"") {
set $proxpass "${backend}";
}
# XXX: lemmy-ansible nginx uses this maximally broad redirection
# if ($http_accept ~ "^application/.*$") {
# set $proxpass "${backend}";
# }
# XXX: POST redirection occurs in lemmy-ansible and docker/nginx.conf but not docker/federation/nginx.conf
if ($request_method = POST) {
set $proxpass "${backend}";