From d53f598c1e4e2eb4b8af66558820fdfde1bc7c07 Mon Sep 17 00:00:00 2001
From: Dario Del Piano <dario@metacell.us>
Date: Tue, 30 Jun 2026 10:43:40 +0200
Subject: [PATCH] nginx fixes

---
 nginx/default.conf | 20 ++++++++++++++------
 1 file changed, 14 insertions(+), 6 deletions(-)

diff --git a/nginx/default.conf b/nginx/default.conf
index 151263e..3277ba3 100644
--- a/nginx/default.conf
+++ b/nginx/default.conf
@@ -137,14 +137,16 @@ server {
         add_header Access-Control-Expose-Headers X-Redirect-Location always;
     }
 
-    location ~ ^/[^/]+/[^/]+/versions$ {
+    location ~ ^/[^/]+/[^/]+/versions(/[^/]+)?$ {
         proxy_pass https://uri.olympiangods.org;
         proxy_set_header Host uri.olympiangods.org;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Authorization $http_authorization;
+        proxy_set_header Cookie $http_cookie;
         proxy_ssl_verify off;
-        
+
         # CORS headers
         add_header Access-Control-Allow-Origin $http_origin always;
         add_header Access-Control-Allow-Credentials true always;
@@ -156,8 +158,10 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Authorization $http_authorization;
+        proxy_set_header Cookie $http_cookie;
         proxy_ssl_verify off;
-        
+
         # CORS headers
         add_header Access-Control-Allow-Origin $http_origin always;
         add_header Access-Control-Allow-Credentials true always;
@@ -169,21 +173,25 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Authorization $http_authorization;
+        proxy_set_header Cookie $http_cookie;
         proxy_ssl_verify off;
-        
+
         # CORS headers
         add_header Access-Control-Allow-Origin $http_origin always;
         add_header Access-Control-Allow-Credentials true always;
     }
 
-    location ~ ^/[^/]+/[^/]+/contributions$ {
+    location ~ ^/[^/]+/contributions$ {
         proxy_pass https://uri.olympiangods.org;
         proxy_set_header Host uri.olympiangods.org;
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header Authorization $http_authorization;
+        proxy_set_header Cookie $http_cookie;
         proxy_ssl_verify off;
-        
+
         # CORS headers
         add_header Access-Control-Allow-Origin $http_origin always;
         add_header Access-Control-Allow-Credentials true always;