diff --git a/volumes/conf.d/code.zinomedia.de.conf b/volumes/conf.d/code.zinomedia.de.conf index 70f30ce..43cff1a 100644 --- a/volumes/conf.d/code.zinomedia.de.conf +++ b/volumes/conf.d/code.zinomedia.de.conf @@ -29,9 +29,9 @@ server { # forward the /validate request to Vouch Proxy #proxy_pass http://vouch:9090/validate; - #resolver 127.0.0.11; + resolver 127.0.0.11; set $upstream "http://vouch:9090/validate"; - proxy_pass $upstream; + # be sure to pass the original host header proxy_set_header Host $http_host; @@ -47,6 +47,8 @@ server { auth_request_set $auth_resp_jwt $upstream_http_x_vouch_jwt; auth_request_set $auth_resp_err $upstream_http_x_vouch_err; auth_request_set $auth_resp_failcount $upstream_http_x_vouch_failcount; + + proxy_pass $upstream; } # if validate returns `401 not authorized` then forward the request to the error401block