From 61469161830cdeaca12d7b4d6873f52f50495865 Mon Sep 17 00:00:00 2001
From: tituspijean <titus+yunohost@pijean.ovh>
Date: Wed, 5 Jul 2023 00:46:12 +0200
Subject: [PATCH] [autopatch] Fix Host and X-Forwarded-For header spoofing

---
 conf/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index cf97361..c220744 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -4,7 +4,7 @@ location __PATH__/ {
   proxy_pass http://127.0.0.1:__PORT__/;
   proxy_pass_request_headers  on;
   proxy_redirect ~^/(.*) $scheme://$http_host__PATH__/$1;
-  proxy_set_header Host $http_host;
+  proxy_set_header Host $host;
   proxy_set_header X-Real-IP $remote_addr;
   proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
   proxy_set_header X-Forwarded-Proto $scheme;