Onpremise: CSRF failures after Nginx introduction

[giggsey]

Recently updated my install, and I've had CSRF failures.

I believe the problem is the nginx relay in https://github.com/getsentry/onpremise/blob/master/nginx/nginx.conf#L44 (introduced in #421) is not passing the original Host header (at least that fixed it locally for me).

Log line from web:

16:46:05 [WARNING] django.security.csrf: Forbidden (Referer checking failed - https://sentry.example.com/auth/login/org/ does not match any trusted origins.): /auth/login/org/ (status_code=403 request=)

[giggsey]

It's missing the proxy_set_header from https://github.com/getsentry/sentry/pull/18433/files#diff-3194b88002aeabc2a7b45a1640d0869bR50

[mlaradji]

Thanks @giggsey. I confirm that after adding the proxy_set_header line to the nginx.conf, the CSRF failure disappeared for me.

[sdwerwed]

proxy_set_header $http_host worked for me