From 04a2da6a64b60c3acde5e876f4157681b5f6bd8e Mon Sep 17 00:00:00 2001
From: Martin McKeaveney <martinmckeaveney@gmail.com>
Date: Sat, 16 Nov 2024 14:50:56 +0000
Subject: [PATCH] enable proxy buffering for calls to OIDC endpoints

---
 hosting/proxy/nginx.prod.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/hosting/proxy/nginx.prod.conf b/hosting/proxy/nginx.prod.conf
index 57a0120720..c5d378afd8 100644
--- a/hosting/proxy/nginx.prod.conf
+++ b/hosting/proxy/nginx.prod.conf
@@ -106,6 +106,12 @@ http {
 
     location ~ ^/api/(system|admin|global)/ {
       proxy_set_header    Host                $host;
+
+      # Enable buffering for potentially large OIDC configs
+      proxy_buffering on;
+      proxy_buffer_size 16k;
+      proxy_buffers 4 32k;
+
       proxy_pass      $worker;
     }