Nicolas Cantu
c4215044f0
**Motivations:** - Restore gate on /ollama/; document Cursor streamFromAgentBackend note. **Root causes:** - N/A. **Correctifs:** - location /ollama/ if map + clear Authorization upstream; deploy script emits Bearer + websocket maps with retry bearer_only. **Evolutions:** - README Cursor subsection on streamFromAgentBackend (observed behavior); feature/services/infrastructure aligned. **Pages affectées:** - deploy/nginx/sites/ia.enso.4nkweb.com.conf - deploy/nginx/deploy-ia-enso-to-proxy.sh - deploy/nginx/README-ia-enso.md - deploy/nginx/http-maps/ia-enso-ollama-bearer.map.conf.example - docs/features/ia-enso-nginx-proxy-ollama-anythingllm.md - docs/services.md - docs/infrastructure.md
14 lines
577 B
Plaintext
14 lines
577 B
Plaintext
# Bearer gate for /ollama/ (matches default site: if ($ia_enso_ollama_authorized = 0) { return 401; }).
|
|
# Install inside `http { ... }` before server blocks that use $ia_enso_ollama_authorized:
|
|
# include /etc/nginx/http-maps/ia-enso-ollama-bearer.map.conf;
|
|
#
|
|
# Copy without the .example suffix; set secret (ASCII, no double quotes in value).
|
|
# Cursor: OpenAI base .../ollama/v1 and API key = same secret (no "Bearer " in field).
|
|
|
|
map_hash_bucket_size 256;
|
|
|
|
map $http_authorization $ia_enso_ollama_authorized {
|
|
default 0;
|
|
"Bearer CHANGE_ME_TO_LONG_RANDOM_SECRET" 1;
|
|
}
|