Yamila Moreno 9528400c6e

🐛 Forward internal Host in nginx proxy_pass to backend/exporter (#11233) ...

The global `proxy_set_header Host $http_host;` forwarded the client-facing
Host to internal proxy_pass calls (backend/exporter), breaking mTLS routing
in service-mesh setups (e.g. Istio STRICT mode), which match outbound
requests to a cluster based on Host/:authority.

Explicitly set `Host $proxy_host` on /api, /assets, /api/export, /readyz
and /ws/notifications so these calls always target the correct internal
service host, independent of the client's original Host header.

Fixes #10835

Signed-off-by: Sebastien MALOT <sebastien.malot@pm.gouv.fr>
Co-authored-by: Sebastien MALOT <sebastien.malot@pm.gouv.fr>

2026-08-13 12:03:27 +02:00

..

devenv

✨ Allow stopping ws0 independently of other workspaces

2026-08-01 11:29:42 +00:00

gitpod

✨ Add nginx configuration for mjs files

2024-04-19 01:29:13 +02:00

imagemagick

🐳 Migrate imagemagick and devenv images to DHI

2026-07-31 19:04:33 +02:00

images

🐛 Forward internal Host in nginx proxy_pass to backend/exporter (#11233)

2026-08-13 12:03:27 +02:00

postgres-upgrade.sh

📎 Add missing copy on postgres upgrade script

2022-11-24 13:38:53 +01:00