From 7d1a3e75d804d31b0e5db584e2634664f3663656 Mon Sep 17 00:00:00 2001
From: XShine555 <xshine555@gmail.com>
Date: Thu, 24 Sep 2026 15:05:41 +0200
Subject: [PATCH] Raise musify proxy buffers for the OIDC session cookies

The OIDC callback answers with the session cookies (encrypted tokens),
which don't fit nginx's default 4k response-header buffer.
---
 edge/conf.d/musify.conf | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/edge/conf.d/musify.conf b/edge/conf.d/musify.conf
index a5163cd..b8d14b2 100644
--- a/edge/conf.d/musify.conf
+++ b/edge/conf.d/musify.conf
@@ -15,6 +15,13 @@ server {
     server_name musify.ikerdemo.cat;
     client_max_body_size 1024m;
 
+    # The OIDC callback answers with the session cookies (encrypted tokens),
+    # bigger than the 4k default response-header buffer.
+    proxy_buffer_size 32k;
+    proxy_buffers 8 32k;
+    proxy_busy_buffers_size 64k;
+    large_client_header_buffers 4 16k;
+
     ssl_certificate     /etc/letsencrypt/live/musify.ikerdemo.cat/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/musify.ikerdemo.cat/privkey.pem;
     include /etc/nginx/snippets/tls.conf;