From 6508edeff91666c747729c3cf4620fcf56c069d7 Mon Sep 17 00:00:00 2001
From: Petro1990 <petrolobanok@gmail.com>
Date: Fri, 13 Mar 2026 18:43:30 +0300
Subject: [PATCH] =?UTF-8?q?=D0=BE=D0=B1=D0=BD=D0=BE=D0=B2=D0=BB=D0=B5?=
 =?UTF-8?q?=D0=BD=D0=B8=D0=B5:=20v1.2.2=20-=20=D0=B3=D0=BB=D1=83=D0=B1?=
 =?UTF-8?q?=D0=BE=D0=BA=D0=B8=D0=B9=20=D1=84=D0=B8=D0=BA=D1=81=20=D0=B0?=
 =?UTF-8?q?=D0=B2=D1=82=D0=BE=D1=80=D0=B8=D0=B7=D0=B0=D1=86=D0=B8=D0=B8=20?=
 =?UTF-8?q?Keenetic=20(SameSite=3DLax,=20Host/Origin=20headers)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 rproxy | 24 +++++++++++++-----------
 1 file changed, 13 insertions(+), 11 deletions(-)

diff --git a/rproxy b/rproxy
index 5d230e2..90ffcce 100644
--- a/rproxy
+++ b/rproxy
@@ -3,7 +3,7 @@
 # Публикация локальных сервисов через SSH-туннели + nginx на VPS
 # http://5.104.75.50:3000/Petro1990/rProxy
 
-VERSION="1.2.1"
+VERSION="1.2.2"
 CONF_DIR="/opt/etc/rproxy"
 CONF_FILE="$CONF_DIR/rproxy.conf"
 SERVICES_DIR="$CONF_DIR/services"
@@ -487,15 +487,16 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Upgrade \$http_upgrade;
         proxy_set_header Connection "upgrade";
-        proxy_set_header Host "\$host";
-        proxy_set_header Origin "\$scheme://\$host";
-        proxy_set_header Referer "\$scheme://\$host/";
+        proxy_set_header Host "\$http_host";
+        proxy_set_header Origin "\$scheme://\$http_host";
+        proxy_set_header Referer "\$http_referer";
         proxy_set_header X-Real-IP \$remote_addr;
         proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto \$scheme;
-        proxy_set_header X-Forwarded-Host \$host;
+        proxy_set_header X-Forwarded-Host \$http_host;
         proxy_set_header X-Forwarded-Port \$server_port;
-        proxy_cookie_path / /;
+        proxy_cookie_path / "/; SameSite=Lax";
+        proxy_hide_header X-Frame-Options;
         proxy_connect_timeout 60s;
         proxy_send_timeout 60s;
         proxy_read_timeout 60s;
@@ -518,15 +519,16 @@ server {
         proxy_http_version 1.1;
         proxy_set_header Upgrade \$http_upgrade;
         proxy_set_header Connection "upgrade";
-        proxy_set_header Host "\$host";
-        proxy_set_header Origin "\$scheme://\$host";
-        proxy_set_header Referer "\$scheme://\$host/";
+        proxy_set_header Host "\$http_host";
+        proxy_set_header Origin "\$scheme://\$http_host";
+        proxy_set_header Referer "\$http_referer";
         proxy_set_header X-Real-IP \$remote_addr;
         proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto \$scheme;
-        proxy_set_header X-Forwarded-Host \$host;
+        proxy_set_header X-Forwarded-Host \$http_host;
         proxy_set_header X-Forwarded-Port \$server_port;
-        proxy_cookie_path / /;
+        proxy_cookie_path / "/; SameSite=Lax";
+        proxy_hide_header X-Frame-Options;
         proxy_connect_timeout 60s;
         proxy_send_timeout 60s;
         proxy_read_timeout 60s;