Strip upstream CORS

Ignore cache control header
Force CORS
2026-01-27 12:49:58 +01:00 · 2026-01-26 15:00:55 +01:00 · 2026-01-08 14:26:53 +01:00 · 2026-01-07 21:52:09 +01:00 · 2026-01-07 21:43:48 +01:00 · 2026-01-07 21:38:42 +01:00
3 changed files with 130 additions and 60 deletions
--- a/README.md
+++ b/README.md
@@ -20,21 +20,12 @@ curl "http://localhost:3000/?url=https://api.example.com/data"
 # Skip cache for this request
 curl -H "X-NoCache: 1" "http://localhost:3000/?url=https://api.example.com/data"
 # Cache custom status codes (e.g., 400s)
 curl -H "X-Status: 400" "http://localhost:3000/?url=https://api.example.com/bad"
 # Purge cache for specific URL
 curl "http://localhost:3000/purge/?url=https://api.example.com/data"
 ```
 ## Features
 - **Always caches** 2xx status codes for 1 year
 - Cache size: 100GB max
 - Request size: 128MB max
 - X-Cache-Status header shows cache status
 - X-NoCache header bypasses cache
 - X-Status header caches custom status codes
 - Interactive web interface at root path
 - Cache purge endpoint
--- a/index.html
+++ b/index.html
@@ -3,85 +3,132 @@
 <head>
    <title>Nginx Cache Proxy</title>
    <style>
-        body { font-family: Arial, sans-serif; max-width: 800px; margin: 0 auto; padding: 20px; }
+        :root {
-        .usage { background: #f5f5f5; padding: 15px; border-radius: 5px; margin: 10px 0; }
+            --bg: #ffffff;
-        .copy-field { margin: 20px 0; }
+            --text: #333333;
-        input { width: 100%; padding: 10px; font-size: 16px; }
+            --heading: #007cba;
-        button { background: #007cba; color: white; border: none; padding: 10px 20px; cursor: pointer; }
+            --border: #007cba;
-        button:hover { background: #005a87; }
+            --code-bg: #f4f4f4;
-        .status { margin-top: 10px; color: green; }
+            --code-inline-bg: #f4f4f4;
            --pre-bg: #2d2d2d;
            --pre-text: #f8f8f2;
            --copy-bg: #e8f4fd;
            --copy-border: #007cba;
            --success: #28a745;
            --error: #dc3545;
        }
        @media (prefers-color-scheme: dark) {
            :root {
                --bg: #1a1a1a;
                --text: #e0e0e0;
                --heading: #58a6ff;
                --border: #58a6ff;
                --code-bg: #2d2d2d;
                --code-inline-bg: #3d3d3d;
                --pre-bg: #0d0d0d;
                --copy-bg: #1c3d5e;
                --copy-border: #58a6ff;
                --success: #3fb950;
                --error: #f85149;
            }
        }
        body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, sans-serif; max-width: 800px; margin: 0 auto; padding: 20px; line-height: 1.6; color: var(--text); background: var(--bg); }
        h1 { border-bottom: 2px solid var(--border); padding-bottom: 10px; color: var(--text); }
        h2 { color: var(--heading); margin-top: 30px; }
        h3 { color: var(--text); opacity: 0.8; }
        code { background: var(--code-inline-bg); padding: 2px 6px; border-radius: 3px; font-family: "Consolas", "Monaco", monospace; font-size: 0.9em; color: var(--text); }
        pre { background: var(--pre-bg); color: var(--pre-text); padding: 15px; border-radius: 5px; overflow-x: auto; }
        pre code { background: none; padding: 0; color: inherit; }
        .copy-section { background: var(--copy-bg); padding: 20px; border-radius: 8px; margin: 20px 0; border-left: 4px solid var(--copy-border); }
        .copy-section h3 { margin-top: 0; color: var(--text); }
        .copy-section p { color: var(--text); }
        button { background: var(--heading); color: white; border: none; padding: 12px 24px; cursor: pointer; border-radius: 5px; font-size: 14px; font-weight: 600; }
        button:hover { filter: brightness(0.9); }
        .status { margin-top: 10px; font-size: 14px; }
        .status.success { color: var(--success); }
        .status.error { color: var(--error); }
        ul { line-height: 1.8; }
        li { color: var(--text); }
    </style>
 </head>
 <body>
    <h1>Nginx Cache Proxy</h1>
    <p>Proxy and cache any HTTP/HTTPS URL with automatic caching.</p>
-    <div class="copy-field">
+    <div class="copy-section">
-        <h3>Quick URL Builder</h3>
+        <h3>Quick Copy</h3>
-        <input type="text" id="urlInput" placeholder="Enter target URL (e.g., https://api.example.com/data)">
+        <p>Copy this proxy URL with <code>?url=</code> appended, then paste any URL after it:</p>
-        <button onclick="copyUrl()">Copy Proxy URL</button>
+        <button onclick="copyProxyUrl()">Copy Proxy URL</button>
        <div id="status" class="status"></div>
    </div>
-    <h2>Usage</h2>
+    <h2>Usage Examples</h2>
-    <div class="usage">
+    <h3>Basic Proxy (Cached)</h3>
-        <h3>Basic Proxy</h3>
+    <pre><code id="basicExample">Loading...</code></pre>
        <pre>curl "http://localhost:3000/?url=https://api.example.com/data"</pre>
    </div>
-    <div class="usage">
+    <h3>Skip Cache</h3>
-        <h3>Skip Cache</h3>
+    <pre><code id="nocacheExample">Loading...</code></pre>
        <pre>curl -H "X-NoCache: 1" "http://localhost:3000/?url=https://api.example.com/data"</pre>
    </div>
    <div class="usage">
        <h3>Cache Custom Status Codes</h3>
        <pre>curl -H "X-Status: 400" "http://localhost:3000/?url=https://api.example.com/bad"</pre>
    </div>
    <div class="usage">
        <h3>Purge Cache</h3>
        <pre>curl "http://localhost:3000/purge/?url=https://api.example.com/data"</pre>
    </div>
    <h2>Features</h2>
    <ul>
-        <li>Always caches 2xx status codes for 1 year</li>
+        <li>Always caches <strong>2xx</strong> status codes for <strong>1 year</strong></li>
-        <li>100GB max cache size</li>
+        <li>Cache size: <strong>100GB</strong> max</li>
-        <li>128MB max per request</li>
+        <li><code>X-Cache-Status</code> header shows cache hit/miss</li>
-        <li>X-Cache-Status header shows hit/miss</li>
+        <li><code>X-NoCache</code> header bypasses cache</li>
-        <li>X-NoCache header bypasses cache</li>
+        <li>Interactive web interface</li>
        <li>X-Status header caches custom status codes</li>
        <li>Purge endpoint for cache management</li>
    </ul>
    <script>
-        function copyUrl() {
+        function getBaseUrl() {
-            const input = document.getElementById('urlInput');
+            const protocol = window.location.protocol;
-            const status = document.getElementById('status');
+            const hostname = window.location.hostname;
            const port = window.location.port;
            let baseUrl = protocol + '//' + hostname;
-            if (!input.value.trim()) {
+            if ((protocol === 'http:' && port !== '80' && port !== '') ||
-                status.textContent = 'Please enter a URL first';
+                (protocol === 'https:' && port !== '443' && port !== '')) {
-                status.style.color = 'red';
+                baseUrl += ':' + port;
                return;
            }
            return baseUrl;
        }
-            const proxyUrl = window.location.origin + '/?url=' + encodeURIComponent(input.value);
+        document.addEventListener('DOMContentLoaded', function() {
            const base = getBaseUrl();
            document.getElementById('basicExample').textContent =
                'curl "' + base + '/?url=https://api.example.com/data"';
            document.getElementById('nocacheExample').textContent =
                'curl -H "X-NoCache: 1" "' + base + '/?url=https://api.example.com/data"';
        });
        function copyProxyUrl() {
            const proxyUrl = window.location.href + '?url=';
            const statusEl = document.getElementById('status');
            navigator.clipboard.writeText(proxyUrl).then(() => {
-                status.textContent = 'Proxy URL copied to clipboard!';
+                statusEl.className = 'status success';
-                status.style.color = 'green';
+                statusEl.textContent = 'Copied: ' + proxyUrl;
            }).catch(err => {
                // Fallback for older browsers
                const textArea = document.createElement('textarea');
                textArea.value = proxyUrl;
                textArea.style.position = 'fixed';
                textArea.style.opacity = '0';
                document.body.appendChild(textArea);
                textArea.select();
-                document.execCommand('copy');
+                try {
                    document.execCommand('copy');
                    statusEl.className = 'status success';
                    statusEl.textContent = 'Copied: ' + proxyUrl;
                } catch (e) {
                    statusEl.className = 'status error';
                    statusEl.textContent = 'Copy failed. URL: ' + proxyUrl;
                }
                document.body.removeChild(textArea);
                status.textContent = 'Proxy URL copied to clipboard!';
                status.style.color = 'green';
            });
        }
    </script>
--- a/nginx.conf
+++ b/nginx.conf
@@ -12,7 +12,9 @@ http {
    proxy_cache_path /etc/nginx/data/cache levels=1:2 keys_zone=api_cache:10m max_size=100g inactive=365d;
    error_log /dev/stdout warn;
-    access_log /dev/stdout;
+
    log_format main '$remote_addr - $remote_user [$time_local] "$request" $status $body_bytes_sent "$http_referer" "$http_user_agent" cache:$upstream_cache_status';
    access_log /dev/stdout main;
    resolver 127.0.0.11 valid=60s;
@@ -30,17 +32,47 @@ http {
            proxy_set_header Host $proxy_host;
            proxy_ssl_server_name on;
            # Strip upstream CORS so we only send our own (duplicate = browser reject)
            proxy_hide_header Access-Control-Allow-Origin;
            proxy_hide_header Access-Control-Allow-Methods;
            proxy_hide_header Access-Control-Allow-Headers;
            proxy_hide_header Access-Control-Expose-Headers;
            proxy_hide_header Access-Control-Max-Age;
            # CORS headers — replace with our own *
            add_header Access-Control-Allow-Origin * always;
            add_header Access-Control-Allow-Methods "GET, POST, PUT, DELETE, OPTIONS, HEAD, PATCH" always;
            add_header Access-Control-Allow-Headers "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization,X-Cache,X-NoCache,X-Status" always;
            add_header Access-Control-Expose-Headers "X-Cache-Status" always;
            # Handle preflight OPTIONS requests
            if ($request_method = 'OPTIONS') {
                return 204;
            }
            proxy_cache api_cache;
            proxy_cache_valid 200 201 202 203 204 205 206 207 208 226 365d;
            proxy_ignore_headers Cache-Control Expires;
            proxy_cache_bypass $http_x_nocache;
            proxy_no_cache $http_x_nocache;
            proxy_cache_use_stale error timeout updating http_500 http_502 http_503 http_504;
            add_header X-Cache-Status $upstream_cache_status always;
        }
        location = /index.html {
            root /usr/share/nginx/html;
            # CORS headers for HTML interface
            add_header Access-Control-Allow-Origin * always;
            add_header Access-Control-Allow-Methods "GET, OPTIONS" always;
            add_header Access-Control-Allow-Headers "DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type" always;
            # Handle preflight OPTIONS requests
            if ($request_method = 'OPTIONS') {
                return 204;
            }
        }
    }
 }
Author	SHA1	Message	Date
PhatPhuckDave	9d48ce54c1	Strip upstream CORS	2026-01-27 12:49:58 +01:00
PhatPhuckDave	c120d7a164	Ignore cache control header	2026-01-26 15:00:55 +01:00
PhatPhuckDave	6aa7c63b07	Force CORS	2026-01-08 14:26:53 +01:00
PhatPhuckDave	05c4e86f4b	Add cache logs	2026-01-07 21:52:09 +01:00
PhatPhuckDave	df77ee5498	Try and "stop" the 502s that esi throws us	2026-01-07 21:43:48 +01:00
PhatPhuckDave	5ecb74ad78	Update the html readme	2026-01-07 21:38:42 +01:00