You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Live updates work when Sublarr is not opened via localhost — Socket.IO
only accepted the origins in SUBLARR_CORS_ORIGINS, which defaulted to
localhost. Opened through a LAN IP or a domain, the page loaded but every
live connection was refused, so progress, toasts and queue updates never
arrived and no error showed. Sublarr now always accepts its own origin
(matched against the Host header); SUBLARR_CORS_ORIGINS defaults to
empty and only adds other origins. X-Forwarded-* headers are not
trusted, so a reverse proxy has to pass the original Host on (Traefik
and Caddy do by default; nginx: proxy_set_header Host $http_host;).