Kevin Veen-Birkenbach b9fbf92461 proxy(cors): make ACAO opt-in; remove hardcoded default ...

Stop forcing Access-Control-Allow-Origin to $scheme://$host. This default broke Element (element.infinito.nexus) -> Synapse (matrix.infinito.nexus) CORS and blocked login. Now ACAO is only set when 'aca_origin' is provided; otherwise we defer to the upstream app (e.g., Synapse) to emit correct CORS headers. Also convert top comments to Jinja block comment.

Discussion & debugging details: https://chatgpt.com/share/68de2236-4aec-800f-adc5-d025922c8753

2025-10-02 08:57:14 +02:00

..

headers

proxy(cors): make ACAO opt-in; remove hardcoded default

2025-10-02 08:57:14 +02:00

location

Add centralized include for Access-Control-Allow headers across proxy/service Nginx templates and align ACA vars for simpleicons task.

2025-09-30 17:22:28 +02:00

vhost

Nextcloud/Talk: add Janus config & fix WebSocket proxying

2025-09-30 11:14:15 +02:00