conflicting headers #46

New Issue

Open

opened 2025-09-26 19:59:10 +00:00 by Brooke · 1 comment

Brooke commented 2025-09-26 19:59:10 +00:00

Owner

Copy Link

Copy Source

So, I've had some more time to review the previous issue on the traefik recipe #58. I was able to resolve the issue by removing the following lines from the compose.yml file. I'm not sure how this effects gitea as I do not have a deployment to test it on. The default way that forgejo seems to reply to requests is with the vary headers Access-Control-Request-Method and Access-Control-Request-Headers which seems to work with the way that SveltiaCMS authenticates.

removed from compose.yml

        - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolallowmethods=GET,OPTIONS,PUT"
        - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolalloworiginlist=https://${GITEA_CORS_ALLOW_DOMAIN}"
        - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolmaxage=100"
        - "traefik.http.middlewares.${STACK_NAME}_cors.headers.addvaryheader=true"

So, I've had some more time to review the previous issue on the traefik recipe [#58](https://git.coopcloud.tech/coop-cloud/traefik/issues/58). I was able to resolve the issue by removing the following lines from the compose.yml file. I'm not sure how this effects gitea as I do not have a deployment to test it on. The default way that forgejo seems to reply to requests is with the vary headers `Access-Control-Request-Method` and `Access-Control-Request-Headers` which seems to work with the way that SveltiaCMS authenticates. removed from compose.yml ``` - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolallowmethods=GET,OPTIONS,PUT" - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolalloworiginlist=https://${GITEA_CORS_ALLOW_DOMAIN}" - "traefik.http.middlewares.${STACK_NAME}_cors.headers.accesscontrolmaxage=100" - "traefik.http.middlewares.${STACK_NAME}_cors.headers.addvaryheader=true" ```

👀 1

Brooke referenced this issue from coop-cloud/traefik 2025-09-26 19:59:26 +00:00

potential issue with cors handling #58

cgalo5758 referenced this issue 2026-09-21 08:37:07 +00:00

fix(#46, #59): handle CORS in Gitea instead of a traefik middleware #68

cgalo5758 commented 2026-09-21 08:48:22 +00:00

Copy Link

Copy Source

#68 drops the traefik _cors labels and lets Gitea's [cors] section do it, roughly what you ended up doing by hand. forgejo has the same labels so that'll be a separate PR once this lands. Curious whether it works with Sveltia if you get a chance to try it.

#68 drops the traefik `_cors` labels and lets Gitea's `[cors]` section do it, roughly what you ended up doing by hand. forgejo has the same labels so that'll be a separate PR once this lands. Curious whether it works with Sveltia if you get a chance to try it.

Sign in to join this conversation.

No Branch/Tag Specified

Branches Tags

master

upgrade-mariadb-10.11.19

main

upgrade-28c01fd-rebased

upgrade-28c01fd

upgrade-2f64ddf

master2

lfs

stop-first

config-update

renovate/configure

3.6.7+1.27.3-rootless

3.6.6+1.27.3-rootless

3.6.5+1.27.3-rootless

3.6.4+1.27.2-rootless

3.6.3+1.27.1-rootless

3.6.2+1.27.1-rootless

3.6.1+1.26.2-rootless

3.6.0+1.24.2-rootless

3.5.3+1.24.2-rootless

3.5.2+1.24.2-rootless

3.5.1+1.24.2-rootless

3.5.0+1.24.2-rootless

3.4.0+1.24.2-rootless

3.3.1+1.23.8-rootless

3.3.0+1.23.1-rootless

3.2.0+1.23.1-rootless

3.1.1+1.23.1-rootless

3.1.0+1.23.0-rootless

3.0.3+1.22.6-rootless

3.0.2+1.22.6-rootless

3.0.1+1.22.3-rootless

3.0.0+1.22.2-rootless

2.11.0+1.22.2-rootless

2.10.1+1.22.2-rootless

2.10.0+1.22.1-rootless

2.9.1+1.22.0-rootless

2.9.0+1.22.0-rootless

2.8.0+1.21.11-rootless

2.7.0+1.21.11-rootless

2.6.2+1.21.10-rootless

2.6.1+1.21.10-rootless

2.6.0+1.21.5-rootless

2.5.2+1.21.5-rootless

2.5.1+1.21.4-rootless

2.5.0+1.21.1-rootless

2.4.0+1.21.0-rootless

2.3.3+1.20.5-rootless

2.3.1+1.20.1-rootless

2.3.2+1.20.3-rootless

2.1.2+1.19.3-rootless

1.3.1+1.17.3-rootless

2.3.0+1.20.1-rootless

2.2.0+1.19.3-rootless

2.1.0+1.18.5-rootless

2.0.1+1.18.2-rootless

2.0.0+1.18.0-rootless

1.3.0+1.17.2-rootless

1.2.1+1.16.8-rootless

1.2.0+1.16.3-rootless

1.1.3+1.15.10-rootless

1.1.2+1.15.6-rootless

1.1.1+1.15.3-rootless

1.1.0+1.15.0-rootless

1.0.0+1.14.5-rootless

Labels

No items

No labels

Milestone

No items

No Milestone

Assignees

Clear assignees

3wordchant aadil (Aadil Ayub) abra-bot (Abra Bot) ammaratef45 amras (Sarma) Apfelwurm appletalk arjan basebuilder BornDeleuze Brooke carla cas (Cassowary) codegod100 coopcloud cyrnel decentral1se (d1) dede devydave fauno (fauno) flancian Frando iexos jade (Jade Ambrose) javielico (Javielico) jjsfunhouse jmakdah2 (Jackie Makdah) joe-irving (Joe Irving) kawaiipunk (KawaiiPunk) knoflook kolaente lambdabundesverband linnealovespie (April) marlon (marlon) mayel mirsal moosemower moritz nicksellen (Nick Sellen) notplants oxaliq (sorrel) p4u1 pau pharaohgraphy (Andrew 🐦‍🔥❤️‍🔥✴️) PhiNatalie renovate-bot (Comrade Renovate Bot) ripclap rix rscmbbng sef (sef) simon sixsmith (Sixsmith) stevensting tobias trav (Trav Fryer) val (val (he/him)) vaznasty virtualboys wolcen (Chris Thompson) wykwit xynosis yksflip

No Assignees

2 Participants

Notifications

Subscribe

Due Date

No due date set.

Dependencies

No dependencies set.

Reference: coop-cloud/gitea#46