diff --git a/rproxy b/rproxy index 5d230e2..90ffcce 100644 --- a/rproxy +++ b/rproxy @@ -3,7 +3,7 @@ # Публикация локальных сервисов через SSH-туннели + nginx на VPS # http://5.104.75.50:3000/Petro1990/rProxy -VERSION="1.2.1" +VERSION="1.2.2" CONF_DIR="/opt/etc/rproxy" CONF_FILE="$CONF_DIR/rproxy.conf" SERVICES_DIR="$CONF_DIR/services" @@ -487,15 +487,16 @@ server { proxy_http_version 1.1; proxy_set_header Upgrade \$http_upgrade; proxy_set_header Connection "upgrade"; - proxy_set_header Host "\$host"; - proxy_set_header Origin "\$scheme://\$host"; - proxy_set_header Referer "\$scheme://\$host/"; + proxy_set_header Host "\$http_host"; + proxy_set_header Origin "\$scheme://\$http_host"; + proxy_set_header Referer "\$http_referer"; proxy_set_header X-Real-IP \$remote_addr; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto \$scheme; - proxy_set_header X-Forwarded-Host \$host; + proxy_set_header X-Forwarded-Host \$http_host; proxy_set_header X-Forwarded-Port \$server_port; - proxy_cookie_path / /; + proxy_cookie_path / "/; SameSite=Lax"; + proxy_hide_header X-Frame-Options; proxy_connect_timeout 60s; proxy_send_timeout 60s; proxy_read_timeout 60s; @@ -518,15 +519,16 @@ server { proxy_http_version 1.1; proxy_set_header Upgrade \$http_upgrade; proxy_set_header Connection "upgrade"; - proxy_set_header Host "\$host"; - proxy_set_header Origin "\$scheme://\$host"; - proxy_set_header Referer "\$scheme://\$host/"; + proxy_set_header Host "\$http_host"; + proxy_set_header Origin "\$scheme://\$http_host"; + proxy_set_header Referer "\$http_referer"; proxy_set_header X-Real-IP \$remote_addr; proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto \$scheme; - proxy_set_header X-Forwarded-Host \$host; + proxy_set_header X-Forwarded-Host \$http_host; proxy_set_header X-Forwarded-Port \$server_port; - proxy_cookie_path / /; + proxy_cookie_path / "/; SameSite=Lax"; + proxy_hide_header X-Frame-Options; proxy_connect_timeout 60s; proxy_send_timeout 60s; proxy_read_timeout 60s;