Capability to tweak CORS config of an app

[shrey]

Some apps, such as n8n, depend on custom reverse proxy config, for their core functioning. (See:
https://forum.cloudron.io/topic/9011/bug-cors-error,
https://community.n8n.io/t/cors-error-in-scenario-where-reverse-proxy-manipulation-is-not-available/25054
)

As Cloudron currently does not provide that facility, for use-cases where such config is essential, having the app on Cloudron becomes irrelevant.

Thus, need that functionality within Cloudron.

[girish]

@shrey thanks! I adjusted the title to be CORS specific. I think adding arbitrary reverse proxy config is quite unlikely. If we allow arbit configs , then we have to somehow make sure nginx doesn't stop working with invalid configs etc. Also, Cloudron itself has nginx configuration, we have to make sure things don't conflict. It's just too generic/flexible.

[shrey]

@girish There are also other parameters that could be essential for an app. Example, rate-limiting.

[girish]

@shrey Yes, feel free to open separate requests for these to track them. I think anyway each configurable parameter has to be investigated separately. Thanks!

[systemaddict]

Did anyone ever find a solution to this?

[girish]

@systemaddict I would check the app's configuration. Some apps let you change the CORS. It's not correct for system adminsto change CORS settings, this is a security issue waiting to happen.