From 31a7aad02ec93d4e7f017cf7c96268365666c80e Mon Sep 17 00:00:00 2001
From: bachhungcb <bachhungcb@gmail.com>
Date: Wed, 27 May 2026 22:41:51 +0700
Subject: [PATCH] fix nginx mesh proxy

---
 nginx/nginx.conf | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/nginx/nginx.conf b/nginx/nginx.conf
index a4d32bd..4d45f16 100644
--- a/nginx/nginx.conf
+++ b/nginx/nginx.conf
@@ -155,7 +155,11 @@ server {
     }
 
     location ~ ^/api/meshcentral/proxy/(.*)$ {
-        proxy_pass http://$meshserver/$1$is_args$args;
+        # Forward directly to MeshCentral via Tailscale HTTPS so MeshCentral receives
+        # requests over TLS and generates correct absolute URLs based on $meshhost.
+        proxy_pass https://soict-overleaf.tailc51e09.ts.net:8443/$1$is_args$args;
+        proxy_ssl_verify off;
+        proxy_ssl_server_name on;
         proxy_cookie_path / "/; HTTPOnly; Secure; SameSite=None";
 
         proxy_set_header Host $meshhost;
-- 
2.46.0.windows.1