From 9af7fc72455362c2bb6cfaeaf66527cd211b6411 Mon Sep 17 00:00:00 2001
From: tituspijean <titus+yunohost@pijean.ovh>
Date: Wed, 5 Jul 2023 00:43:45 +0200
Subject: [PATCH] [autopatch] Fix Host and X-Forwarded-For header spoofing

---
 conf/nginx.conf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/conf/nginx.conf b/conf/nginx.conf
index 5c2a375..6360e99 100644
--- a/conf/nginx.conf
+++ b/conf/nginx.conf
@@ -24,7 +24,7 @@ location ~ ^/(admin|graphql|thumbnailer) {
     proxy_http_version 1.1;
     proxy_set_header Upgrade $http_upgrade;
     proxy_set_header Connection "upgrade";
-    proxy_set_header Host $http_host;
+    proxy_set_header Host $host;
     proxy_set_header X-Forwarded-Host $http_host;
     proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;