zulip/puppet
Alex Vandiver e8c8544028 nginx: Do not forward X-amz-cf-id header to S3.
All `X-amz-*` headers must be included in the signed request to S3;
since Django did not take those headers into account (it constructed a
request from scratch, while nginx's request inherits them from the
end-user's request), the proxied request fails to be signed correctly.

Strip off the `X-amz-cf-id` header added by CloudFront.  While we
would ideally strip off all `X-amz-*` headers, this requires a
third-party module[^1].

[^1]: https://github.com/openresty/headers-more-nginx-module#more_clear_input_headers
2023-08-28 12:30:14 -07:00
..
zulip nginx: Do not forward X-amz-cf-id header to S3. 2023-08-28 12:30:14 -07:00
zulip_ops puppet: Fix includes for new name of zulip_ops::prometheus::tornado. 2023-08-09 02:32:28 +00:00
deps.yaml puppet: Update dependencies. 2023-05-11 10:51:37 -07:00