Ggtcf

Would a completely good Muggle be able to use a wand?

Several mode to write the symbol of a vector

How do scammers retract money, while you can’t?

calculus parametric curve length

Is there an analogue of projective spaces for proper schemes?

How do I transpose the 1st and -1th levels of an arbitrarily nested array?

Received an invoice from my ex-employer billing me for training; how to handle?

Rotate a column

Would this house-rule that treats advantage as a +1 to the roll instead (and disadvantage as -1) and allows them to stack be balanced?

What exact does MIB represent in SNMP? How is it different from OID?

Is it possible to search for a directory/file combination?

Bold, vivid family

Help understanding this unsettling image of Titan, Epimetheus, and Saturn's rings?

Is there a difference between "Fahrstuhl" and "Aufzug"

Novel about a guy who is possessed by the divine essence and the world ends?

Written every which way

Non-deterministic sum of floats

How to start emacs in "nothing" mode (`fundamental-mode`)

How do I go from 300 unfinished/half written blog posts, to published posts?

Why does standard notation not preserve intervals (visually)

Is it professional to write unrelated content in an almost-empty email?

What can we do to stop prior company from asking us questions?

Are there any limitations on attacking while grappling?

If/When UK leaves the EU, can a future goverment conduct a referendum to join the EU?

nginx headers not added

1

I'm trying to add CORS headers to my nginx server. I tried the following:

include mime.types;

server 
listen 80;
listen [::]:80;
server_name #domain;
return 301 https://$server_name$request_uri;


server 
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
server_name #domain;

location / DELETE)') 
 add_header 'Access-Control-Allow-Origin' '*';
 add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, Authorization';
 add_header 'Access-Control-Allow-Methods' 'GET, POST, PATCH, PUT, DELETE, HEAD, OPTIONS';
 add_header Strict-Transport-Security “max-age=15768000” always;
 
 proxy_pass http://localhost:3000;



ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

ssl_session_cache shared:SSL:5m;
ssl_session_timeout 1h;

But while GET and OPTIONS have their headers added, the other methods don't.
I saw that headers are only added if there are not on the previous level so I tried to have them all at the same level.
Am I doing something wrong?

nginx reverse-proxy backend

share|improve this question

edited Mar 8 at 14:39

Anass Elidrissi

asked Mar 8 at 14:12

Anass ElidrissiAnass Elidrissi

2516

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  Since OPTIONS is the only preflight one and the rest of the verbs are all the same you can just get rid of the if statement altogether so it is always added.
  
  – Shawn C.
  Mar 8 at 15:15
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  I did try removing the if but they still don't get added. I'm not sure where the problem comes from
  
  – Anass Elidrissi
  Mar 8 at 15:55
  

  
  
  
  

add a comment | 

1

I'm trying to add CORS headers to my nginx server. I tried the following:

include mime.types;

server 
listen 80;
listen [::]:80;
server_name #domain;
return 301 https://$server_name$request_uri;


server 
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
server_name #domain;

location / DELETE)') 
 add_header 'Access-Control-Allow-Origin' '*';
 add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, Authorization';
 add_header 'Access-Control-Allow-Methods' 'GET, POST, PATCH, PUT, DELETE, HEAD, OPTIONS';
 add_header Strict-Transport-Security “max-age=15768000” always;
 
 proxy_pass http://localhost:3000;



ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

ssl_session_cache shared:SSL:5m;
ssl_session_timeout 1h;

But while GET and OPTIONS have their headers added, the other methods don't.
I saw that headers are only added if there are not on the previous level so I tried to have them all at the same level.
Am I doing something wrong?

nginx reverse-proxy backend

share|improve this question

edited Mar 8 at 14:39

Anass Elidrissi

asked Mar 8 at 14:12

Anass ElidrissiAnass Elidrissi

2516

• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  Since OPTIONS is the only preflight one and the rest of the verbs are all the same you can just get rid of the if statement altogether so it is always added.
  
  – Shawn C.
  Mar 8 at 15:15
  

  
  
  
  


• 
  
  
  

  
  1
  

  
  
  
  
  
  

  
  
  I did try removing the if but they still don't get added. I'm not sure where the problem comes from
  
  – Anass Elidrissi
  Mar 8 at 15:55
  

  
  
  
  

add a comment | 

I'm trying to add CORS headers to my nginx server. I tried the following:

include mime.types;

server 
listen 80;
listen [::]:80;
server_name #domain;
return 301 https://$server_name$request_uri;


server 
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
server_name #domain;

location / DELETE)') 
 add_header 'Access-Control-Allow-Origin' '*';
 add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, Authorization';
 add_header 'Access-Control-Allow-Methods' 'GET, POST, PATCH, PUT, DELETE, HEAD, OPTIONS';
 add_header Strict-Transport-Security “max-age=15768000” always;
 
 proxy_pass http://localhost:3000;



ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

ssl_session_cache shared:SSL:5m;
ssl_session_timeout 1h;

But while GET and OPTIONS have their headers added, the other methods don't.
I saw that headers are only added if there are not on the previous level so I tried to have them all at the same level.
Am I doing something wrong?

nginx reverse-proxy backend

share|improve this question

edited Mar 8 at 14:39

Anass Elidrissi

asked Mar 8 at 14:12

Anass ElidrissiAnass Elidrissi

2516

include mime.types;

server 
listen 80;
listen [::]:80;
server_name #domain;
return 301 https://$server_name$request_uri;


server 
listen 443 ssl http2 default_server;
listen [::]:443 ssl http2 default_server;
server_name #domain;

location / DELETE)') 
 add_header 'Access-Control-Allow-Origin' '*';
 add_header 'Access-Control-Allow-Headers' 'Origin, X-Requested-With, Content-Type, Accept, Authorization';
 add_header 'Access-Control-Allow-Methods' 'GET, POST, PATCH, PUT, DELETE, HEAD, OPTIONS';
 add_header Strict-Transport-Security “max-age=15768000” always;
 
 proxy_pass http://localhost:3000;



ssl_certificate /etc/letsencrypt/live/domain.com/fullchain.pem;
ssl_certificate_key /etc/letsencrypt/live/domain.com/privkey.pem;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;
ssl_ciphers EECDH+CHACHA20:EECDH+AES128:RSA+AES128:EECDH+AES256:RSA+AES256:EECDH+3DES:RSA+3DES:!MD5;

ssl_session_cache shared:SSL:5m;
ssl_session_timeout 1h;

share|improve this question

edited Mar 8 at 14:39

Anass Elidrissi

asked Mar 8 at 14:12

Anass ElidrissiAnass Elidrissi

2516

share|improve this question

edited Mar 8 at 14:39

Anass Elidrissi

asked Mar 8 at 14:12

Anass ElidrissiAnass Elidrissi

2516

asked Mar 8 at 14:12

Anass ElidrissiAnass Elidrissi

2516

asked Mar 8 at 14:12

Anass ElidrissiAnass Elidrissi

2516