Admin/han-app
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Добавлена Яндекс.Капча

Browse Source
This commit is contained in:
mi
2026-07-23 18:53:32 +03:00
parent 31efbf3b69
commit 8c3c454998
36 changed files with 836 additions and 35 deletions
Download Patch File Download Diff File Expand all files Collapse all files
codebase/backend/nginx/snippets/proxy-keycloak-captcha-csp.conf
+2
View File
@@ -0,0 +1,2 @@
proxy_hide_header Content-Security-Policy;
add_header Content-Security-Policy "default-src 'self'; base-uri 'self'; form-action 'self'; frame-src 'self' https://smartcaptcha.cloud.yandex.ru https://yastatic.net; frame-ancestors 'self'; object-src 'none'; script-src 'self' 'unsafe-inline' https://smartcaptcha.cloud.yandex.ru https://yastatic.net; connect-src 'self' https://smartcaptcha.cloud.yandex.ru; img-src 'self' data: blob: https://smartcaptcha.cloud.yandex.ru https://yastatic.net; style-src 'self' 'unsafe-inline' https://yastatic.net; font-src 'self' data: https://yastatic.net" always;
codebase/backend/nginx/templates/frontend-static.conf.template
+5
View File
@@ -19,6 +19,11 @@ location = /service-worker.js {
add_header Cache-Control "no-cache";
include /etc/nginx/generated/security-headers.conf;
}
location = /register-sw.js {
root /usr/share/nginx/html;
add_header Cache-Control "no-cache";
include /etc/nginx/generated/security-headers.conf;
}
location / {
root /usr/share/nginx/html;
try_files $uri $uri/ /index.html;
codebase/backend/nginx/templates/site-tls.conf.template
+14
View File
@@ -107,6 +107,20 @@ server {
include /etc/nginx/snippets/proxy-keycloak.conf;
proxy_pass http://keycloak_upstream;
}
location = /auth/realms/han-chat/protocol/openid-connect/auth {
limit_req zone=auth burst=10;
include /etc/nginx/snippets/proxy-keycloak.conf;
include /etc/nginx/snippets/proxy-keycloak-captcha-csp.conf;
proxy_read_timeout 60s;
proxy_pass http://keycloak_upstream;
}
location = /auth/realms/han-chat/login-actions/authenticate {
limit_req zone=auth burst=10;
include /etc/nginx/snippets/proxy-keycloak.conf;
include /etc/nginx/snippets/proxy-keycloak-captcha-csp.conf;
proxy_read_timeout 60s;
proxy_pass http://keycloak_upstream;
}
location ^~ /auth/realms/ {
limit_req zone=auth burst=10;
include /etc/nginx/snippets/proxy-keycloak.conf;