Raise musify proxy buffers for the OIDC session cookies

The OIDC callback answers with the session cookies (encrypted tokens), which don't fit nginx's default 4k response-header buffer.
2026-09-24 15:05:41 +02:00
parent 78a6688711
commit 7d1a3e75d8
1 changed files with 7 additions and 0 deletions
@@ -15,6 +15,13 @@ server {
    server_name musify.ikerdemo.cat;
    client_max_body_size 1024m;

+    # The OIDC callback answers with the session cookies (encrypted tokens),
+    # bigger than the 4k default response-header buffer.
+    proxy_buffer_size 32k;
+    proxy_buffers 8 32k;
+    proxy_busy_buffers_size 64k;
+    large_client_header_buffers 4 16k;
+
    ssl_certificate     /etc/letsencrypt/live/musify.ikerdemo.cat/fullchain.pem;
    ssl_certificate_key /etc/letsencrypt/live/musify.ikerdemo.cat/privkey.pem;
    include /etc/nginx/snippets/tls.conf;