mirror of
https://github.com/kevinveenbirkenbach/computer-playbook.git
synced 2025-08-30 15:28:12 +02:00
Replaced web_protocol by WEB_PROTOCOL
This commit is contained in:
@@ -16,12 +16,12 @@ server:
|
||||
unsafe-inline: true
|
||||
whitelist:
|
||||
connect-src:
|
||||
- "{{ web_protocol }}://*.{{ primary_domain }}"
|
||||
- "{{ web_protocol }}://{{ primary_domain }}"
|
||||
- "{{ WEB_PROTOCOL }}://*.{{ primary_domain }}"
|
||||
- "{{ WEB_PROTOCOL }}://{{ primary_domain }}"
|
||||
script-src-elem:
|
||||
- https://cdn.jsdelivr.net
|
||||
style-src:
|
||||
- https://cdn.jsdelivr.net
|
||||
frame-ancestors:
|
||||
- "{{ web_protocol }}://<< defaults_applications[web-app-keycloak].server.domains.canonical[0] >>"
|
||||
- "{{ WEB_PROTOCOL }}://<< defaults_applications[web-app-keycloak].server.domains.canonical[0] >>"
|
||||
|
||||
|
@@ -8,7 +8,7 @@ location = /logout {
|
||||
proxy_http_version 1.1;
|
||||
|
||||
# CORS headers – allow your central page to call this
|
||||
add_header 'Access-Control-Allow-Origin' '{{ domains | get_url('web-svc-logout', web_protocol) }}' always;
|
||||
add_header 'Access-Control-Allow-Origin' '{{ domains | get_url('web-svc-logout', WEB_PROTOCOL) }}' always;
|
||||
add_header 'Access-Control-Allow-Credentials' 'true' always;
|
||||
add_header 'Access-Control-Allow-Methods' 'GET, OPTIONS' always;
|
||||
add_header 'Access-Control-Allow-Headers' 'Accept, Authorization' always;
|
||||
|
Reference in New Issue
Block a user