Mindboost/mindboost-media-server
7
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

change position of acessing $request method

Browse Source
This commit is contained in:
Robert Rapp
2025-07-17 13:45:58 +02:00
parent 2130614ab1
commit 35060b11df
1 changed files with 12 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
nginx/conf.d/default.conf.template
View File

@@ -9,19 +9,21 @@ server {
root /usr/share/nginx/html; root /usr/share/nginx/html;
index index.html; index index.html;
# ---------- Geschützte Audio-Ressourcen ----------
location ~* \.(opus|flac|ogg|mp3|wav|m4a|aac)$ {
# --------- Preflight direkt per IF --------- # --------- Preflight direkt per IF ---------
if ($request_method = 'OPTIONS') { if ($request_method = "OPTIONS") {
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
add_header Access-Control-Allow-Methods "GET, HEAD, OPTIONS"; add_header Access-Control-Allow-Methods "GET, HEAD, OPTIONS";
add_header Access-Control-Allow-Headers "Content-Type,X-API-Key,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type"; add_header Access-Control-Allow-Headers "Content-Type,X-API-Key,Keep-Alive,User-Agent,Cache-Control,Content-Type";
add_header Access-Control-Max-Age 1728000; add_header Access-Control-Max-Age 1728000;
add_header Content-Length 0; add_header Content-Length 0;
return 204; return 204;
} }
# ---------- Geschützte Audio-Ressourcen ----------
location ~* \.(opus|flac|ogg|mp3|wav|m4a|aac)$ {
# --- Key-Check (nur GET/HEAD) --- # --- Key-Check (nur GET/HEAD) ---
if ($request_method != "OPTIONS") { if ($request_method != "OPTIONS") {
if ($http_x_api_key != "${MEDIA_API_KEY}") { if ($http_x_api_key != "${MEDIA_API_KEY}") {
@@ -32,7 +34,7 @@ server {
# --- CORS & Cache --- # --- CORS & Cache ---
add_header Access-Control-Allow-Origin "*"; add_header Access-Control-Allow-Origin "*";
add_header Access-Control-Allow-Methods "GET, HEAD, OPTIONS"; add_header Access-Control-Allow-Methods "GET, HEAD, OPTIONS";
add_header Access-Control-Allow-Headers "Content-Type, X-API-Key,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type"; add_header Access-Control-Allow-Headers "Content-Type, X-API-Key,Keep-Alive,User-Agent,Cache-Control,Content-Type";
add_header Cache-Control "public, max-age=2592000" always; add_header Cache-Control "public, max-age=2592000" always;
# fehlende MIME-Types # fehlende MIME-Types