From e90c6452f88ee7204ea2e8fda0b79d061e8f90e7 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Agust=C3=ADn=20Cisneros?= Date: Tue, 30 Jun 2026 16:06:19 +0200 Subject: [PATCH] fix qbittorrent csrf header handling --- qbittorrent.subdomain.conf.sample | 34 +++++++++++++++---------------- qbittorrent.subfolder.conf.sample | 34 +++++++++++++++---------------- 2 files changed, 34 insertions(+), 34 deletions(-) diff --git a/qbittorrent.subdomain.conf.sample b/qbittorrent.subdomain.conf.sample index c67a1be68..8e9035da8 100644 --- a/qbittorrent.subdomain.conf.sample +++ b/qbittorrent.subdomain.conf.sample @@ -1,4 +1,4 @@ -## Version 2025/07/18 +## Version 2026/06/30 # make sure that your qbittorrent container is named qbittorrent # make sure that your dns has a cname set for qbittorrent # Api and related location bypasses are now commented out by default @@ -58,8 +58,8 @@ server { set $upstream_proto http; proxy_pass $upstream_proto://$upstream_app:$upstream_port; - proxy_set_header Referer ''; - proxy_set_header Host $upstream_app:$upstream_port; + proxy_set_header Host $host; + proxy_set_header Origin "https://$host"; proxy_set_header X-Forwarded-Host $host; } @@ -73,8 +73,8 @@ server { # rewrite /qbittorrent(.*) $1 break; - # proxy_set_header Referer ''; - # proxy_set_header Host $upstream_app:$upstream_port; + # proxy_set_header Host $host; + # proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -88,8 +88,8 @@ server { # rewrite /qbittorrent(.*) $1 break; - # proxy_set_header Referer ''; - # proxy_set_header Host $upstream_app:$upstream_port; + # proxy_set_header Host $host; + # proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -103,8 +103,8 @@ server { # rewrite /qbittorrent(.*) $1 break; - # proxy_set_header Referer ''; - # proxy_set_header Host $upstream_app:$upstream_port; + # proxy_set_header Host $host; + # proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -118,8 +118,8 @@ server { # rewrite /qbittorrent(.*) $1 break; - # proxy_set_header Referer ''; - # proxy_set_header Host $upstream_app:$upstream_port; + # proxy_set_header Host $host; + # proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -133,8 +133,8 @@ server { # rewrite /qbittorrent(.*) $1 break; - # proxy_set_header Referer ''; - # proxy_set_header Host $upstream_app:$upstream_port; + # proxy_set_header Host $host; + # proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -148,8 +148,8 @@ server { # rewrite /qbittorrent(.*) $1 break; - # proxy_set_header Referer ''; - # proxy_set_header Host $upstream_app:$upstream_port; + # proxy_set_header Host $host; + # proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -163,8 +163,8 @@ server { # rewrite /qbittorrent(.*) $1 break; - # proxy_set_header Referer ''; - # proxy_set_header Host $upstream_app:$upstream_port; + # proxy_set_header Host $host; + # proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } } diff --git a/qbittorrent.subfolder.conf.sample b/qbittorrent.subfolder.conf.sample index d0bd429bc..6f363b99c 100644 --- a/qbittorrent.subfolder.conf.sample +++ b/qbittorrent.subfolder.conf.sample @@ -1,4 +1,4 @@ -## Version 2023/10/10 +## Version 2026/06/30 # make sure that your qbittorrent container is named qbittorrent # qbittorrent does not require a base url setting # Api and related location bypasses are now commented out by default @@ -37,8 +37,8 @@ location ^~ /qbittorrent/ { rewrite /qbittorrent(.*) $1 break; - proxy_set_header Referer ''; - proxy_set_header Host $upstream_app:$upstream_port; + proxy_set_header Host $host; + proxy_set_header Origin "https://$host"; proxy_set_header X-Forwarded-Host $host; } @@ -52,8 +52,8 @@ location ^~ /qbittorrent/ { # rewrite /qbittorrent(.*) $1 break; -# proxy_set_header Referer ''; -# proxy_set_header Host $upstream_app:$upstream_port; +# proxy_set_header Host $host; +# proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -67,8 +67,8 @@ location ^~ /qbittorrent/ { # rewrite /qbittorrent(.*) $1 break; -# proxy_set_header Referer ''; -# proxy_set_header Host $upstream_app:$upstream_port; +# proxy_set_header Host $host; +# proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -82,8 +82,8 @@ location ^~ /qbittorrent/ { # rewrite /qbittorrent(.*) $1 break; -# proxy_set_header Referer ''; -# proxy_set_header Host $upstream_app:$upstream_port; +# proxy_set_header Host $host; +# proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -97,8 +97,8 @@ location ^~ /qbittorrent/ { # rewrite /qbittorrent(.*) $1 break; -# proxy_set_header Referer ''; -# proxy_set_header Host $upstream_app:$upstream_port; +# proxy_set_header Host $host; +# proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -112,8 +112,8 @@ location ^~ /qbittorrent/ { # rewrite /qbittorrent(.*) $1 break; -# proxy_set_header Referer ''; -# proxy_set_header Host $upstream_app:$upstream_port; +# proxy_set_header Host $host; +# proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -127,8 +127,8 @@ location ^~ /qbittorrent/ { # rewrite /qbittorrent(.*) $1 break; -# proxy_set_header Referer ''; -# proxy_set_header Host $upstream_app:$upstream_port; +# proxy_set_header Host $host; +# proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # } @@ -142,7 +142,7 @@ location ^~ /qbittorrent/ { # rewrite /qbittorrent(.*) $1 break; -# proxy_set_header Referer ''; -# proxy_set_header Host $upstream_app:$upstream_port; +# proxy_set_header Host $host; +# proxy_set_header Origin "https://$host"; # proxy_set_header X-Forwarded-Host $host; # }