From be45cc1cc0c2d31c198b6d47b054f2827b7e46e5 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?C=C3=A9dric=20FAMIBELLE-PRONZOLA?= <c.pronzola@tuta.io>
Date: Sat, 24 Jan 2026 17:56:56 +0400
Subject: [PATCH] docs: ajout de proxy_buffer et X-Forwarded-Host dans la
 configuration nginx

---
 DEPLOYMENT.md | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)

diff --git a/DEPLOYMENT.md b/DEPLOYMENT.md
index 6e69041..eb9d8d0 100644
--- a/DEPLOYMENT.md
+++ b/DEPLOYMENT.md
@@ -96,7 +96,15 @@ server {
         proxy_set_header X-Real-IP $remote_addr;
         proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-Host $host;
         proxy_cache_bypass $http_upgrade;
+
+        # Buffer sizes pour les gros headers/cookies (JWT)
+        proxy_buffer_size 128k;
+        proxy_buffers 4 256k;
+        proxy_busy_buffers_size 256k;
+
+        # Timeouts
         proxy_connect_timeout 60;
         proxy_send_timeout 60;
         proxy_read_timeout 60;
@@ -173,6 +181,14 @@ curl http://localhost:3000
 sudo tail -20 /var/log/nginx/exemple.com.error.log
 ```
 
+Si le curl local fonctionne mais pas via Nginx, verifier les buffer sizes dans la config Nginx (necessaires pour les gros cookies JWT):
+
+```nginx
+proxy_buffer_size 128k;
+proxy_buffers 4 256k;
+proxy_busy_buffers_size 256k;
+```
+
 ### Erreur de connexion API
 
 ```bash