strip upstream X-Frame-Options from service proxies

README.md

@@ -167,8 +167,8 @@ reconnects automatically.
 Tests live in `tests/` and run with pytest:
 
 ```bash
-pip install pytest
+# Install uv: curl -LsSf https://astral.sh/uv/install.sh | sh
-pytest tests/ -v
+uvx pytest tests/ -v
 ```
 
 Tests auto-discover sites from `docker/nginx/conf.d/*.conf` — no list to

docker/nginx/conf.d/beszel.hantim.net.conf

@@ -28,5 +28,6 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_hide_header X-Frame-Options;
     }
 }

docker/nginx/conf.d/garage.hantim.net.conf

@@ -31,5 +31,6 @@ server {
         deny all;
 
         proxy_pass http://garage:3903;
+        proxy_hide_header X-Frame-Options;
     }
 }

docker/nginx/conf.d/goatcounter.hantim.net.conf

@@ -28,5 +28,6 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_hide_header X-Frame-Options;
     }
 }

docker/nginx/conf.d/s3.hantim.net.conf

@@ -31,5 +31,6 @@ server {
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_hide_header X-Frame-Options;
     }
 }

tools/service.sh

@@ -298,6 +298,7 @@ server {
         proxy_set_header Host \$host;
         proxy_set_header X-Real-IP \$remote_addr;
         proxy_set_header X-Forwarded-For \$proxy_add_x_forwarded_for;
+        proxy_hide_header X-Frame-Options;
     }
 }
 NGINX