diff --git a/backend/src/server/routes/v3/external-migration-router.ts b/backend/src/server/routes/v3/external-migration-router.ts index 71861bf4c9..870ae37155 100644 --- a/backend/src/server/routes/v3/external-migration-router.ts +++ b/backend/src/server/routes/v3/external-migration-router.ts @@ -4,9 +4,12 @@ import { readLimit } from "@app/server/config/rateLimiter"; import { verifyAuth } from "@app/server/plugins/auth/verify-auth"; import { AuthMode } from "@app/services/auth/auth-type"; +const MB25_IN_BYTES = 26214400; + export const registerExternalMigrationRouter = async (server: FastifyZodProvider) => { server.route({ method: "POST", + bodyLimit: MB25_IN_BYTES, url: "/env-key", config: { rateLimit: readLimit diff --git a/nginx/default.conf b/nginx/default.conf index e47ac2934b..5541db8604 100644 --- a/nginx/default.conf +++ b/nginx/default.conf @@ -15,6 +15,21 @@ server { proxy_cookie_path / "/; HttpOnly; SameSite=strict"; } + location /api/v3/migrate { + client_max_body_size 25M; + + proxy_set_header X-Real-RIP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + + proxy_set_header Host $http_host; + proxy_set_header X-NginX-Proxy true; + + proxy_pass http://backend:4000; + proxy_redirect off; + + proxy_cookie_path / "/; HttpOnly; SameSite=strict"; + } + location /.well-known/est { proxy_set_header X-Real-RIP $remote_addr; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; diff --git a/nginx/default.dev.conf b/nginx/default.dev.conf index ea637e2cc7..2d651cba8d 100644 --- a/nginx/default.dev.conf +++ b/nginx/default.dev.conf @@ -17,6 +17,21 @@ server { proxy_cookie_path / "/; HttpOnly; SameSite=strict"; } + location /api/v3/migrate { + client_max_body_size 25M; + + proxy_set_header X-Real-RIP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + + proxy_set_header Host $http_host; + proxy_set_header X-NginX-Proxy true; + + proxy_pass http://backend:4000; + proxy_redirect off; + + proxy_cookie_path / "/; HttpOnly; SameSite=strict"; + } + location /.well-known/est { proxy_set_header X-Real-RIP $remote_addr;