viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: strip conditional headers in bot-block-proxy to fix CalDAV sync

Browse source 
nginx's not_modified_filter evaluated If-Match headers forwarded by
Traefik's forwardAuth, returning 412 and breaking CalDAV VTODO updates
from macOS/iOS Reminders. Switch to OpenResty and clear conditional
headers with Lua before proxy processing.
This commit is contained in:
Viktor Barzin 2026-05-05 22:51:19 +01:00 • committed by Viktor Barzin
parent 813148c4af
commit da7a11eb3b
1 changed files with 7 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

8
stacks/traefik/modules/traefik/main.tf
View file

@ -307,6 +307,12 @@ resource "kubernetes_config_map" "bot_block_proxy_config" {
server { server {
listen 8080; listen 8080;
location /auth { location /auth {
access_by_lua_block {
ngx.req.clear_header("If-Match")
ngx.req.clear_header("If-None-Match")
ngx.req.clear_header("If-Modified-Since")
ngx.req.clear_header("If-Unmodified-Since")
}
proxy_pass http://poison_fountain; proxy_pass http://poison_fountain;
proxy_connect_timeout 3s; proxy_connect_timeout 3s;
proxy_read_timeout 5s; proxy_read_timeout 5s;
@ -373,7 +379,7 @@ resource "kubernetes_deployment" "bot_block_proxy" {
} }
container { container {
name = "nginx" name = "nginx"
image = "nginx:1-alpine" image = "openresty/openresty:alpine"
port { port {
container_port = 8080 container_port = 8080