From 0b615db4e232b3defe9fc0f02975f368142798d6 Mon Sep 17 00:00:00 2001
From: sonicaj <waqarsonic1@gmail.com>
Date: Tue, 14 Sep 2021 12:45:44 +0500
Subject: [PATCH] Set Referer header in nginx configuration

---
 test/collabora/1.0.0/templates/nginx-conf.yaml  |  7 +++++++
 test/collabora/1.0.0/templates/nginx-deployment | 17 +++++++++++++++++
 2 files changed, 24 insertions(+)
 create mode 100644 test/collabora/1.0.0/templates/nginx-deployment

diff --git a/test/collabora/1.0.0/templates/nginx-conf.yaml b/test/collabora/1.0.0/templates/nginx-conf.yaml
index d57c885386..0bee6e13d1 100644
--- a/test/collabora/1.0.0/templates/nginx-conf.yaml
+++ b/test/collabora/1.0.0/templates/nginx-conf.yaml
@@ -74,6 +74,7 @@ data:
 
             location = /robots.txt {
               add_header Content-Type text/plain;
+              proxy_set_header Referer "http://nginx";
               return 200 "User-agent: *\nDisallow: /loleaflet/*\n";
             }
 
@@ -82,6 +83,7 @@ data:
                 set $upstream_collabora collabora;
                 proxy_pass http://$upstream_collabora:9980;
                 proxy_set_header Host $http_host;
+                proxy_set_header Referer "http://nginx";
             }
 
             # WOPI discovery URL
@@ -89,6 +91,7 @@ data:
                 set $upstream_collabora collabora;
                 proxy_pass http://$upstream_collabora:9980;
                 proxy_set_header Host $http_host;
+                proxy_set_header Referer "http://nginx";
             }
 
             # Capabilities
@@ -96,6 +99,7 @@ data:
                 set $upstream_collabora collabora;
                 proxy_pass http://$upstream_collabora:9980;
                 proxy_set_header Host $http_host;
+                proxy_set_header Referer "http://nginx";
             }
 
             # main websocket
@@ -105,6 +109,7 @@ data:
                 proxy_set_header Upgrade $http_upgrade;
                 proxy_set_header Connection "Upgrade";
                 proxy_set_header Host $http_host;
+                proxy_set_header Referer "http://nginx";
                 proxy_read_timeout 36000s;
             }
 
@@ -113,6 +118,7 @@ data:
                 set $upstream_collabora collabora;
                 proxy_pass http://$upstream_collabora:9980;
                 proxy_set_header Host $http_host;
+                proxy_set_header Referer "http://nginx";
             }
 
             # Admin Console websocket
@@ -122,6 +128,7 @@ data:
                 proxy_set_header Upgrade $http_upgrade;
                 proxy_set_header Connection "Upgrade";
                 proxy_set_header Host $http_host;
+                proxy_set_header Referer "http://nginx";
                 proxy_read_timeout 36000s;
             }
 
diff --git a/test/collabora/1.0.0/templates/nginx-deployment b/test/collabora/1.0.0/templates/nginx-deployment
new file mode 100644
index 0000000000..ace90af7b6
--- /dev/null
+++ b/test/collabora/1.0.0/templates/nginx-deployment
@@ -0,0 +1,17 @@
+{{ $values := (. | mustDeepCopy) }}
+{{ $_ := set $values "common" (dict "nameSuffix" "nginx") }}
+{{ include "common.deployment.common_config" $values | nindent 0 }}
+spec: {{ include "common.deployment.common_spec" $values | nindent 2 }}
+  template: {{ include "common.deployment.pod.metadata" $values | nindent 4 }}
+    spec:
+      containers:
+      - name: {{ .Chart.Name }}-nginx
+        image: {{ printf "%s:%s" .Values.nginx.image.repository .Values.nginx.image.tag }}
+        imagePullPolicy: {{ .Values.nginx.image.pullPolicy }}
+        ports:
+        - name: http
+          containerPort: 80
+          protocol: TCP
+        - name: https
+          containerPort: 443
+          protocol: TCP