Track nginx config in-repo + OAuth-discovery 404 for MCP connectors - #8
Open
fhwrdh wants to merge 1 commit into
Open
Track nginx config in-repo + OAuth-discovery 404 for MCP connectors#8fhwrdh wants to merge 1 commit into
fhwrdh wants to merge 1 commit into
Conversation
Codifies the previously hand-edited droplet nginx config into the repo, and captures the fix that lets the claude.ai remote connector connect: return a clean 404 for /.well-known/oauth* so the client treats Tomu as a no-OAuth server and uses the path-secret URL, instead of failing dynamic client registration against the SPA's 200-HTML catch-all. - deploy/nginx/tomu.conf — source site config (all locations incl. the 404) - deploy/nginx/tomu-ratelimit.conf — the auth rate-limit zone - docs/SELF-HOSTING.md — nginx block updated + rationale Note: this tracks the config; applying nginx changes to the box is still manual (see the infra-as-code issue). Live droplet already matches. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
4 tasks
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Captures the nginx config in version control (it was previously a hand-edit on the droplet) and documents the fix that made the claude.ai connector work: a clean
404on/.well-known/oauth*so the client treats Tomu as no-OAuth and connects via the path secret, rather than failing OAuth dynamic client registration against the SPA's 200-HTML catch-all.deploy/nginx/tomu.conf+deploy/nginx/tomu-ratelimit.conf— tracked source configdocs/SELF-HOSTING.md— nginx block + rationaleScope note: this makes the config tracked/reproducible. It does not auto-apply to the droplet — the CI pipeline only deploys app code; nginx is still applied manually. Wiring nginx (and other server config) into the deploy pipeline is a separate initiative (infra-as-code issue). The live box already matches this config.
🤖 Generated with Claude Code