From 3463b0a4f466c3712357faa72eb7bf2eb6b526ce Mon Sep 17 00:00:00 2001 From: glass beadian Date: Tue, 13 Oct 2026 17:07:50 +0000 Subject: [PATCH] edge: strip Accept-Encoding on the oCIS signin restyle location oCIS compresses the idp sign-in HTML, and sub_filter cannot rewrite compressed bodies. Works on the grey/failover path where the edge serves files; in tunnel mode files bypasses the edge entirely (tunnel ingress points straight at oCIS), so the permanent brand fix remains the Hub OIDC issuer (docs/design/2026-10-13-files-oidc-sso.md). --- infra/occupymedia/edge/nginx.conf | 2 ++ 1 file changed, 2 insertions(+) diff --git a/infra/occupymedia/edge/nginx.conf b/infra/occupymedia/edge/nginx.conf index c096e5c..699e407 100644 --- a/infra/occupymedia/edge/nginx.conf +++ b/infra/occupymedia/edge/nginx.conf @@ -248,6 +248,8 @@ http { proxy_pass http://192.168.13.210:9200; proxy_http_version 1.1; proxy_set_header Host $host; + # sub_filter cannot rewrite upstream-gzipped bodies; force plain HTML. + proxy_set_header Accept-Encoding ""; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-Proto https; proxy_set_header Upgrade $http_upgrade;