From 2addfb64920cf9b3fe27e3ddee8d702ded587444 Mon Sep 17 00:00:00 2001
From: Developer <developer@discord-automod.local>
Date: Fri, 31 Jul 2026 16:54:41 +0700
Subject: [PATCH] fix(proxy): relative redirects so Traefik doesn't leak :8080

---
 infra/nix/nginx.conf.template | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/infra/nix/nginx.conf.template b/infra/nix/nginx.conf.template
index 65b5e25..b6b0fc4 100644
--- a/infra/nix/nginx.conf.template
+++ b/infra/nix/nginx.conf.template
@@ -15,6 +15,10 @@ http {
     listen 8080;
     server_name _;
 
+    # Use relative redirects (Location: /dashboard/) instead of absolute
+    # URLs that leak the internal listen port (8080) through Traefik.
+    absolute_redirect off;
+
     gzip on;
     gzip_types text/plain text/css application/json application/javascript application/wasm image/svg+xml;
     gzip_min_length 256;