From 460aa1284052e9e65ecd329d750961b45f677022 Mon Sep 17 00:00:00 2001
From: skeris <kotilion.95@gmail.com>
Date: Mon, 24 Mar 2025 02:41:47 +0300
Subject: [PATCH] add referrer to codewords

---
 default.conf | 33 ++++++++++++++++++++++++++-------
 1 file changed, 26 insertions(+), 7 deletions(-)

diff --git a/default.conf b/default.conf
index 3bb3d87..353b836 100644
--- a/default.conf
+++ b/default.conf
@@ -1,6 +1,6 @@
 server {
+  resolver 10.89.1.1 valid=10s;
 	root /usr/share/nginx/html;
-  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
   location /robots.txt {
     try_files $uri $uri/ /index.html;
     }
@@ -95,8 +95,8 @@ server {
 
 }
 server {
+  resolver 10.89.1.1 valid=10s;
 	root /usr/share/nginx/html;
-  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
   location /robots.txt {
     try_files $uri $uri/ /index.html;
     }
@@ -206,6 +206,8 @@ server {
 		proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Client-Port $remote_port;
     proxy_set_header Origin $host;
+    proxy_set_header Referer $host;
+
     proxy_pass http://10.8.0.226:19100/;
   }
   location /codeword/v1.0.0/ {
@@ -215,6 +217,8 @@ server {
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
 		proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Client-Port $remote_port;
+proxy_set_header Referer $host;
+
     proxy_set_header Origin $host;
     proxy_pass http://10.8.0.226:19100/;
   }
@@ -376,8 +380,9 @@ server {
 
 }
 server {
+resolver 10.89.1.1 valid=10s;
+
 	root /usr/share/nginx/html;
-  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
   location /robots.txt {
     try_files $uri $uri/ /index.html;
     }
@@ -489,6 +494,8 @@ server {
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
 		proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Client-Port $remote_port;
+proxy_set_header Referer $host;
+
     proxy_set_header Origin $host;
     proxy_pass http://10.8.0.226:19100/;
   }
@@ -500,6 +507,8 @@ server {
 		proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Client-Port $remote_port;
     proxy_set_header Origin $host;
+proxy_set_header Referer $host;
+
     proxy_pass http://10.8.0.226:19100/;
   }
 
@@ -659,7 +668,8 @@ server {
 }
 server {
 	root /usr/share/nginx/html;
-  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
+resolver 10.89.1.1 valid=10s;
+
   location /robots.txt {
     try_files $uri $uri/ /index.html;
     }
@@ -766,6 +776,8 @@ server {
     add_header Access-Control-Allow-Credentials true always;
     add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
+proxy_set_header Referer $host;
+
 		proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Client-Port $remote_port;
     proxy_set_header Origin $host;
@@ -777,6 +789,8 @@ server {
     add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
 		proxy_set_header X-Real-IP $remote_addr;
+proxy_set_header Referer $host;
+
     proxy_set_header X-Client-Port $remote_port;
     proxy_set_header Origin $host;
     proxy_pass http://10.8.0.226:19100/;
@@ -938,7 +952,7 @@ server {
 }
 server {
 	root /usr/share/nginx/html;
-  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
+resolver 10.89.1.1 valid=10s;
 
 	index index.html index.htm index.nginx-debian.html;
   server_name hub.pena.digital; # managed by Certbot
@@ -1065,6 +1079,8 @@ server {
     add_header Access-Control-Allow-Headers content-type,authorization,response-type always;
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
 		proxy_set_header X-Real-IP $remote_addr;
+proxy_set_header Referer $host;
+
     proxy_set_header X-Client-Port $remote_port;
     proxy_set_header Origin $host;
     proxy_pass http://10.8.0.226:19100/;
@@ -1076,6 +1092,8 @@ server {
     add_header Access-Control-Allow-Methods OPTIONS,GET,POST,PATCH,PUT,DELETE;
 		proxy_set_header X-Real-IP $remote_addr;
     proxy_set_header X-Client-Port $remote_port;
+proxy_set_header Referer $host;
+
     proxy_set_header Origin $host;
     proxy_pass http://10.8.0.226:19100/;
   }
@@ -1124,6 +1142,7 @@ server {
 }
 server {
 	root /usr/share/nginx/html;
+resolver 10.89.1.1 valid=10s;
 
 	index index.html index.htm index.nginx-debian.html;
   server_name pena.digital www.pena.digital; # managed by Certbot
@@ -1161,7 +1180,7 @@ server {
 }
 server {
 	root /usr/share/nginx/html;
-  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
+resolver 10.89.1.1 valid=10s;
 
 	index index.html index.htm index.nginx-debian.html;
   server_name tourism.pena.digital; # managed by Certbot
@@ -1199,7 +1218,7 @@ server {
 }
 server {
 	root /usr/share/nginx/html;
-  access_log syslog:server=10.8.0.3:514,tag=nginx_access main;
+resolver 10.89.1.1 valid=10s;
 
 	index index.html index.htm index.nginx-debian.html;
   server_name solyanka.pena.digital; # managed by Certbot