From c5afe554b5bc27806568019bde3ef7e78a716140 Mon Sep 17 00:00:00 2001 From: Karol Wypchlo Date: Tue, 31 Aug 2021 16:39:42 +0200 Subject: [PATCH] do not expose Skynet-Requested-Skylink --- docker/nginx/conf.d/server/server.api | 16 ++++++++++++++++ 1 file changed, 16 insertions(+) diff --git a/docker/nginx/conf.d/server/server.api b/docker/nginx/conf.d/server/server.api index e84a4e09..0003e703 100644 --- a/docker/nginx/conf.d/server/server.api +++ b/docker/nginx/conf.d/server/server.api @@ -216,6 +216,14 @@ location /skynet/pin { location /skynet/metadata { include /etc/nginx/conf.d/include/cors; + header_filter_by_lua_block { + ngx.header["Skynet-Portal-Api"] = os.getenv("SKYNET_PORTAL_API") + ngx.header["Skynet-Server-Api"] = os.getenv("SKYNET_SERVER_API") + + -- do not expose internal header + ngx.header["Skynet-Requested-Skylink"] = "" + } + proxy_set_header User-Agent: Sia-Agent; proxy_pass http://sia:9980; } @@ -223,6 +231,14 @@ location /skynet/metadata { location /skynet/resolve { include /etc/nginx/conf.d/include/cors; + header_filter_by_lua_block { + ngx.header["Skynet-Portal-Api"] = os.getenv("SKYNET_PORTAL_API") + ngx.header["Skynet-Server-Api"] = os.getenv("SKYNET_SERVER_API") + + -- do not expose internal header + ngx.header["Skynet-Requested-Skylink"] = "" + } + proxy_set_header User-Agent: Sia-Agent; proxy_pass http://sia:9980; }