Skip to content

Commit

Permalink
Merge pull request #9 from NLnetLabs/nginx-oidc-advice-update
Browse files Browse the repository at this point in the history
Refer to newer NGINX directive in OIDC known limitations.
  • Loading branch information
ximon18 committed May 16, 2022
2 parents 678417a + 9d1026b commit 0571d96
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions source/multi-user/openid-connect-provider.rst
Original file line number Diff line number Diff line change
Expand Up @@ -164,9 +164,9 @@ but require more effort to setup and maintain:
response header buffer sizes used by your proxy.

With NGINX this can be done by increasing settings such as `proxy_buffer_size <http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffer_size>`_,
`proxy_buffers <http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffers>`_,
`http2_max_field_size <https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_field_size>`_ and
`http2_max_header_size <https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_header_size>`_.
`proxy_buffers <http://nginx.org/en/docs/http/ngx_http_proxy_module.html#proxy_buffers>`_, `large_client_header_buffers <http://nginx.org/en/docs/http/ngx_http_core_module.html#large_client_header_buffers>`_ (or `http2_max_field_size <https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_field_size>`_ and
`http2_max_header_size <https://nginx.org/en/docs/http/ngx_http_v2_module.html#http2_max_header_size>`_
before NGINX v1.19.7). Thanks to GitHub user `racompton <https://github.com/racompton>`_ for the ``large_client_header_buffers`` tip!
If using Kubernetes use the equivalent NGINX ingress controller ConfigMap
settings, e.g. `http2-max-field-size <https://kubernetes.github.io/ingress-nginx/user-guide/nginx-configuration/configmap/#http2-max-field-size>`_. Thanks to GitHub user `TheEnbyperor <https://github.com/TheEnbyperor>`_ for the HTTP/2 and Kubernetes tips!

Expand Down

0 comments on commit 0571d96

Please sign in to comment.