nixos/services
ediblerope 0c7b6f1b58 nginx: strip cookies on qBit proxy so localhost-bypass always wins
qBittorrent's auth logic is "no SID cookie → bypass for localhost; SID
cookie present → validate it." If the browser has a stale SID from an
earlier session, qBit fails validation and returns 401 even though the
connection is from 127.0.0.1 and bypass is enabled.

Strip both directions: drop the client's Cookie header on the way in so
qBit never sees an SID, and hide Set-Cookie on the way back so the
browser never accumulates one in the first place.

Co-Authored-By: Claude Opus 4.7 <noreply@anthropic.com>
2026-04-24 14:57:55 +01:00
..
adguard.nix router: phase-2 cleanup + camera DHCP reservation 2026-04-24 10:52:11 +01:00
arr-interconnect.nix arr-interconnect: enforce Prowlarr local-auth bypass 2026-04-24 14:39:53 +01:00
authelia.nix 2026-04-24 13:39:32 +01:00
bazarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00
cloudflare-ddns.md Update docs: add new services to readme, remove obsolete go2rtc-readme 2026-04-07 20:42:19 +01:00
cloudflare-ddns.nix Update cloudflare-ddns.nix 2026-02-15 09:06:23 +02:00
fail2ban.nix Replace Docker containers with native NixOS modules for nginx, Authelia, and go2rtc 2026-04-07 15:47:56 +01:00
game-servers.nix Disable EAC on 7DTD server so Proton clients can connect 2026-04-18 23:05:08 +01:00
go2rtc.nix Fix go2rtc: use RuntimeDirectory instead of mkdir /run/go2rtc 2026-04-07 20:51:22 +01:00
homepage.nix Wire AdGuard Home into Authelia SSO and Homepage dashboard 2026-04-22 14:15:57 +01:00
jellyfin.nix Force Jellyfin UMask=0002 to override new nixpkgs default 2026-04-16 20:20:01 +01:00
nginx.nix nginx: strip cookies on qBit proxy so localhost-bypass always wins 2026-04-24 14:57:55 +01:00
prowlarr.nix Update prowlarr.nix 2026-01-22 10:49:01 +00:00
qbittorrent-nox.nix Set UMask 0002 on all media services for group-writable files 2026-04-15 23:23:56 +01:00
radarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00
router.nix router: phase-2 cleanup + camera DHCP reservation 2026-04-24 10:52:11 +01:00
server-permissions.nix Reorganise hardware vs host config, tidy settings and services 2026-04-01 21:16:59 +01:00
sonarr.nix Force UMask=0002 on Radarr, Sonarr, Bazarr 2026-04-16 20:22:37 +01:00