Merge pull request 'Вход из браузера: X-Forwarded-* — CORS 403 за Caddy' (#6) from fix/forwarded-headers into master

Reviewed-on: #6
This commit was merged in pull request #6.
This commit is contained in:
2026-11-05 15:44:28 +01:00
@@ -1,5 +1,8 @@
spring.application.name=mail-server spring.application.name=mail-server
server.port=8080 server.port=8080
# behind a proxy (Jambotron Caddy): take scheme/host from X-Forwarded-*, otherwise the browser's own
# domain looks like another origin to CORS and every API call with an Origin header gets 403
server.forward-headers-strategy=framework
# Secrets: environment variables, or files in a config tree (file name = variable name, e.g. /run/mail-secrets/DB_PASSWORD). # Secrets: environment variables, or files in a config tree (file name = variable name, e.g. /run/mail-secrets/DB_PASSWORD).
# No defaults — the server does not start without them (dev profile: application-dev.properties). # No defaults — the server does not start without them (dev profile: application-dev.properties).