Modify WebUI headers


Recommended Posts

Hi

 

I am trying to bed my Unraid WebUi as a tab in Home Assistant. This worked perfectly on my LAN with UnRaid version 6.9 but since upgrading to version 6.10 it seems like the web server now sets the x-frame-options header to 'sameorigin'. 

 

Is there a way I can update this?

 

Thanks in advance!

 

 

Link to comment
  • 4 months later...
  • 1 year later...

I've had this issue too. I'm using HomeAssistant LoveLace dashboard where I use iFrames for my other web interfaces.

 

For future reference:

- SSH to your Unraid server

- Open /etc/nginx/nginx.conf with vi or nano

- Go to the bottom to find add_header Content-Security-Policy "frame-ancestors 'self' https://connect.myunraid.net/"

- Edit to your liking (example): add_header Content-Security-Policy "frame-ancestors 'self' https://connect.myunraid.net/ https://ha.mydomain.net"

 

After editing you need to reload the web service of unraid:

/etc/rc.d/rc.nginx reload

 

 

Extra:

If you run a reverse proxy and/or 2FA service in your iframe you need to include these too. It is allowed to add IP addresses.

 

As an example:

add_header Content-Security-Policy "frame-ancestors 'self' https://connect.myunraid.net/ https://ha.mydomain.net 192.168.1.1 172.30.0.2"

 

Dropdown:

- Default: https://connect.myunraid.net/

- Where the iframe is used: https://ha.mydomain.net

- Reverse proxy: 192.168.1.1

- 2FA url 172.30.0.2

Edited by renedis1
Link to comment

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Restore formatting

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.