Skip to content

Set proxy_hide_header directive for nginx app_cache - #6977

Merged
dannyroberts merged 2 commits into
masterfrom
gh/nginx-headers
Sep 16, 2026
Merged

dannyroberts merged 2 commits into
masterfrom
gh/nginx-headers

Conversation

@dannyroberts

Copy link
Copy Markdown
Member

Adds the proxy_hide_header: Set-Cookie directive to the apps/download location,
so responses served from app_cache do not carry a Set-Cookie header. The
location already sets proxy_ignore_headers: Set-Cookie; this adds the companion
directive.

Includes a changelog entry with rollout instructions.

Environments Affected

All environments (nginx proxy configuration).

  • If the changes affect multiple environments, I will ensure they are rolled out consistently across all environments.
Announce New Release
  • (Dimagi only) After merging, I will follow these instructions to announce a new commcare-cloud release.

proxy_hide_header tells nginx not to pass the specified header
fields back to the client, in this case the Set-Cookie header field.

https://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_hide_header
@dannyroberts
dannyroberts merged commit f613dd4 into master Sep 16, 2026
10 checks passed
@dannyroberts
dannyroberts deleted the gh/nginx-headers branch September 16, 2026 21:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants