grabowski dbc140c1f9 Fix CSRF 403: override Origin header in Caddy proxy snippet ...

SvelteKit checks the browser's Origin header, not just Host or
X-Forwarded-Proto. Rewrite Origin to https://collection.newedge.house
so CSRF passes on all non-public routes (NetBird, Yggdrasil, Tor).

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-04-13 14:18:56 +07:00

..

caddy-reverse-proxy.md

Fix CSRF 403: override Origin header in Caddy proxy snippet

2026-04-13 14:18:56 +07:00

ci-deploy-setup.md

Update deploy workflow for private repo with deploy keys

2026-04-07 16:26:04 +07:00

deploy-proxmox-lxc.md

Add Proxmox LXC deployment guide

2026-04-07 13:30:52 +07:00