From 1bc68837d329a55885958ee6e2b488cc02da9322 Mon Sep 17 00:00:00 2001
From: Vinzenz Schroeter <vinzenz.f.s@gmail.com>
Date: Sat, 9 Mar 2024 13:44:26 +0100
Subject: [PATCH] CORS requests are allowed without basic auth

---
 hetzner-vpn1.nix | 6 ++++--
 1 file changed, 4 insertions(+), 2 deletions(-)

diff --git a/hetzner-vpn1.nix b/hetzner-vpn1.nix
index b476138..010f781 100644
--- a/hetzner-vpn1.nix
+++ b/hetzner-vpn1.nix
@@ -13,8 +13,10 @@
         # bind to tailscale ip
         proxy_bind 100.88.118.60;
         # pam auth
-        auth_pam  "Password Required";
-        auth_pam_service_name "nginx";
+        limit_except OPTIONS {
+          auth_pam  "Password Required";
+          auth_pam_service_name "nginx";
+        }
       '';
     };
   };