Monorepo for Aesthetic.Computer
aesthetic.computer
lith/Caddyfile: let Kubo's CORS header pass through unchanged
The header_down -Access-Control-Allow-Origin strip fired but the followup
set didn't re-add the header, leaving ipfs.aesthetic.computer with no CORS
header at all. Kubo already emits a single * so the simplest fix is to
remove both header_down directives and pass upstream through verbatim.
Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
+4
-6
+4
-6
lith/Caddyfile
+4
-6
lith/Caddyfile
···
133
133
}
134
134
135
135
# --- ipfs.aesthetic.computer (self-hosted IPFS gateway) ---
136
-
# Kubo's gateway already emits Access-Control-Allow-Origin; strip upstream
137
-
# copies so Caddy owns exactly one, avoiding "*, *" dupes that browsers reject.
136
+
# Kubo's gateway already emits a single Access-Control-Allow-Origin: *,
137
+
# so we pass it through unmodified. An earlier Caddy-level `header`
138
+
# directive added a second copy, producing "*, *" which browsers reject.
138
139
@ipfs host ipfs.aesthetic.computer
139
140
handle @ipfs {
140
-
reverse_proxy localhost:8090 {
141
-
header_down -Access-Control-Allow-Origin
142
-
header_down Access-Control-Allow-Origin *
143
-
}
141
+
reverse_proxy localhost:8090
144
142
}
145
143
146
144
# --- justanothersystem.org ---