kevinveenbirkenbachandClaude Opus 5.5 4c6f9d5cd7 refactor(networks): decide a handover sibling in one lookup and proxy it as the canonical host ...

The handover condition lived as the same inline Jinja in basic.conf.j2,
ws_generic.conf.j2 and Baserow's proxy.conf.j2. Move it into
lookup('network_handover', application_id, domain), which also refuses a
non-boolean flag, and use it at all three places.

A handover sibling still proxies its health, MCP and SSO endpoints to the
backend, and those requests carried the onion Host, which single-URL apps
reject: pretix answered /healthz/ready on the onion with 400 Unknown host
and failed the Prometheus blackbox probe. forwarded.conf.j2 now sends the
canonical domain as Host and X-Forwarded-Host on a handover sibling, so the
onion probe keeps measuring the backend through the onion vhost.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>

2026-10-18 15:19:57 +02:00

..

action

fix(cache): render the applications carrier without the caller's application_id

2026-10-16 21:25:43 +02:00

filter

fix(csp): let onion pages frame the single SSO issuer

2026-10-15 16:29:19 +02:00

lookup

refactor(networks): decide a handover sibling in one lookup and proxy it as the canonical host

2026-10-18 15:19:57 +02:00

__init__.py

…