lfg2025/archy
1
0
Fork 0
Code Issues 14 Pull Requests Actions Packages Projects Releases 44 Wiki Activity

fix: Gitea iframe uses proxy path, not direct port

Browse Source 
Added gitea to PROXY_APPS so it always routes through /app/gitea/
nginx proxy (same origin as parent page). Fixes X-Frame-Options
SAMEORIGIN rejection when loading via direct port.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
This commit is contained in:
Dorian 2026-04-12 07:05:32 -04:00
parent 1a41d16cef
commit 1165e52c92
1 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

5
neode-ui/src/views/appSession/appSessionConfig.ts
View File

@ -51,7 +51,9 @@ export const APP_PORTS: Record<string, number> = {
/** Apps that need nginx proxy for iframe embedding. /** Apps that need nginx proxy for iframe embedding.
* IndeedHub loads via /app/indeedhub/ proxy for nostr-provider.js injection * IndeedHub loads via /app/indeedhub/ proxy for nostr-provider.js injection
* from the container's internal nginx so iframe works on all servers. */ * from the container's internal nginx so iframe works on all servers. */
export const PROXY_APPS: Record<string, string> = {} export const PROXY_APPS: Record<string, string> = {
'gitea': '/app/gitea/',
}
/** Nginx proxy paths -- used on HTTPS to avoid mixed content (HTTPS parent + HTTP port iframe). /** Nginx proxy paths -- used on HTTPS to avoid mixed content (HTTPS parent + HTTP port iframe).
* On HTTP, direct port access is used instead (faster, no proxy). */ * On HTTP, direct port access is used instead (faster, no proxy). */
@ -97,7 +99,6 @@ export const HTTPS_PROXY_PATHS: Record<string, string> = {
/** External HTTPS apps -- always loaded directly */ /** External HTTPS apps -- always loaded directly */
export const EXTERNAL_URLS: Record<string, string> = { export const EXTERNAL_URLS: Record<string, string> = {
'gitea': 'http://23.182.128.160:3000',
'nwnn': 'https://nwnn.l484.com', 'nwnn': 'https://nwnn.l484.com',
'484-kitchen': 'https://484.kitchen', '484-kitchen': 'https://484.kitchen',
'call-the-operator': 'https://cta.tx1138.com', 'call-the-operator': 'https://cta.tx1138.com',