diff --git a/root/defaults/nginx/tinyauth-proxy.conf.sample b/root/defaults/nginx/tinyauth-proxy.conf.sample deleted file mode 100644 index c68a6c7..0000000 --- a/root/defaults/nginx/tinyauth-proxy.conf.sample +++ /dev/null @@ -1,39 +0,0 @@ -## Version 2023/02/09 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/proxy.conf.sample - -# Timeout if the real server is dead -proxy_next_upstream error timeout invalid_header http_500 http_502 http_503; - -# Proxy Connection Settings -proxy_buffers 32 4k; -proxy_connect_timeout 240; -proxy_headers_hash_bucket_size 128; -proxy_headers_hash_max_size 1024; -proxy_http_version 1.1; -proxy_read_timeout 240; -proxy_redirect http:// $scheme://; -proxy_send_timeout 240; - -# Proxy Cache and Cookie Settings -proxy_cache_bypass $cookie_session; -#proxy_cookie_path / "/; Secure"; # enable at your own risk, may break certain apps -proxy_no_cache $cookie_session; - -# Proxy Header Settings -proxy_set_header Connection $connection_upgrade; -proxy_set_header Early-Data $ssl_early_data; -proxy_set_header Host $host; -proxy_set_header Proxy ""; -proxy_set_header Upgrade $http_upgrade; -proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; -# Tinyauth doesn't want both the x-forwarded-host/x-forwarded-uri headers and the x-original-url header, -# so we clear them out here -proxy_set_header X-Forwarded-Host ""; -proxy_set_header X-Forwarded-Uri ""; -proxy_set_header X-Forwarded-Method $request_method; -proxy_set_header X-Forwarded-Port $server_port; -proxy_set_header X-Forwarded-Proto $scheme; -proxy_set_header X-Forwarded-Server $host; -proxy_set_header X-Forwarded-Ssl on; -proxy_set_header X-Original-Method $request_method; -proxy_set_header X-Original-URL $scheme://$http_host$request_uri; -proxy_set_header X-Real-IP $remote_addr; diff --git a/root/defaults/nginx/tinyauth-server.conf.sample b/root/defaults/nginx/tinyauth-server.conf.sample index 03bdeb5..a8118ce 100644 --- a/root/defaults/nginx/tinyauth-server.conf.sample +++ b/root/defaults/nginx/tinyauth-server.conf.sample @@ -1,4 +1,4 @@ -## Version 2026/07/19 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-server.conf.sample +## Version 2026/09/08 - Changelog: https://github.com/linuxserver/docker-swag/commits/master/root/defaults/nginx/tinyauth-server.conf.sample # Make sure that your tinyauth container is in the same user defined bridge network and is named tinyauth # Rename /config/nginx/proxy-confs/tinyauth.subdomain.conf.sample to /config/nginx/proxy-confs/tinyauth.subdomain.conf @@ -6,10 +6,19 @@ location /tinyauth { internal; - include /config/nginx/tinyauth-proxy.conf; include /config/nginx/resolver.conf; set $upstream_tinyauth tinyauth; proxy_pass http://$upstream_tinyauth:3000/api/auth/nginx; + + # Don't send the body to the auth server proxy_pass_request_body off; proxy_set_header Content-Length ""; + + # Headers needed for authentication + proxy_set_header X-Original-URL $scheme://$http_host$request_uri; + proxy_set_header X-Real-IP $remote_addr; + + # Not needed by Tinyauth right now but may be needed in the future + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Original-Method $request_method; }