revert(caddy): drop RomM empty-Bearer workaround
Deploy to valhalla / deploy (push) Has been cancelled
Deploy to valhalla / deploy (push) Has been cancelled
decky-romm-sync has completed its first-run token mint, so the Authorization: Bearer (empty token) probe that crashed RomM 4.8.x no longer occurs. Collapse roms.ginnoir.com back to a plain reverse_proxy.
This commit is contained in:
@@ -122,25 +122,7 @@ stash.ginnoir.com {
|
||||
# GAMES / ROMS — public (temporarily; RomM has its own auth)
|
||||
# =============================================================
|
||||
roms.ginnoir.com {
|
||||
# WORKAROUND (2026-06-06): RomM 4.8.x 500s on a malformed Authorization
|
||||
# header — hybrid_auth.py does `scheme, token = header.split()` with no
|
||||
# guard, so a value with !=2 space-separated parts raises ValueError.
|
||||
# decky-romm-sync >=0.20.0 sends `Authorization: Bearer ` (empty token) on
|
||||
# its first-run probes, before it has minted a Client API Token, which trips
|
||||
# that crash and deadlocks setup (heartbeat/platforms/devices all 500).
|
||||
# Strip the empty-token header so the heartbeat probe returns 200 and the
|
||||
# Basic-auth token mint (POST /api/client-tokens) can run. Real `Bearer
|
||||
# rmm_…` tokens and browser session-cookie auth are unaffected. Remove once
|
||||
# the plugin omits the empty header (or RomM guards the split).
|
||||
@romm_empty_bearer header_regexp Authorization "^Bearer\s*$"
|
||||
handle @romm_empty_bearer {
|
||||
reverse_proxy romm:8080 {
|
||||
header_up -Authorization
|
||||
}
|
||||
}
|
||||
handle {
|
||||
reverse_proxy romm:8080
|
||||
}
|
||||
reverse_proxy romm:8080
|
||||
}
|
||||
|
||||
# =============================================================
|
||||
|
||||
Reference in New Issue
Block a user