community: Fix CSRF issue with monkey patch fix

[chef.git] / cookbooks / community / templates / default / web_only.yml.erb

diff --git a/cookbooks/community/templates/default/web_only.yml.erb b/cookbooks/community/templates/default/web_only.yml.erb
index 5beef48028613719c639700ff74c01e7af6fe50e..c62d76a5da48fe37e89d53d9ab197b14745a77ee 100644 (file)
--- a/cookbooks/community/templates/default/web_only.yml.erb
+++ b/cookbooks/community/templates/default/web_only.yml.erb
@@ -133,3 +133,6 @@ hooks:
           resolver <%= @resolvers.join(" ") %>;
           resolver_timeout 5s;
           ssl_dhparam /shared/ssl/dhparam.pem;
+          # FIXME: Workaround CSRF issue. Monkey patch, need proper investigation and fix.
+          proxy_set_header Host $http_host;
+          proxy_set_header X-Forwarded-Proto $thescheme;