@askexenow/exe-os 0.9.406 → 0.9.408

package/deploy/compose/erp-nginx/nginx.conf

@@ -32,6 +32,9 @@ server {
     location /assets/ {
         proxy_pass http://$erp_backend;
         proxy_set_header Host $host;
+        # Frappe prioritizes this header over Host. Never pass a caller's
+        # selector through to another company site on a shared bench.
+        proxy_set_header X-Frappe-Site-Name $host;
         proxy_set_header X-Real-IP $remote_addr;
         expires 1y;
         add_header Cache-Control "public, immutable";
@@ -39,8 +42,9 @@ server {
 
     # Uploaded files
     location /files/ {
-        alias /home/frappe/frappe-bench/sites/;
-        try_files /$host/public/files/$uri =404;
+        root /home/frappe/frappe-bench/sites;
+        # $uri already starts with /files/. Match only this Host's public tree.
+        try_files /$host/public$uri =404;
     }
 
     # Socket.IO
@@ -50,6 +54,7 @@ server {
         proxy_set_header Upgrade $http_upgrade;
         proxy_set_header Connection "upgrade";
         proxy_set_header Host $host;
+        proxy_set_header X-Frappe-Site-Name $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
@@ -60,6 +65,7 @@ server {
         proxy_pass http://$erp_backend;
         proxy_http_version 1.1;
         proxy_set_header Host $host;
+        proxy_set_header X-Frappe-Site-Name $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;