From 82a43e25e0dd0020a96e42cc109885befd6ae29d Mon Sep 17 00:00:00 2001
From: wiz <j@wiz.biz>
Date: Sat, 18 Nov 2023 12:40:39 +0900
Subject: [PATCH] ops: Set nginx no-cache headers for /api/v1/services/auth

---
 production/nginx/location-api-v1-services.conf | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/production/nginx/location-api-v1-services.conf b/production/nginx/location-api-v1-services.conf
index 813807bb0..f35205041 100644
--- a/production/nginx/location-api-v1-services.conf
+++ b/production/nginx/location-api-v1-services.conf
@@ -10,6 +10,18 @@ location /api/v1/services/account {
 	proxy_hide_header content-security-policy;
 	proxy_hide_header x-frame-options;
 }
+location /api/v1/services/auth {
+	proxy_pass $mempoolSpaceServices;
+	expires -1;
+	add_header 'Pragma' 'no-cache';
+	add_header 'Cache-Control' 'private, no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0';
+	proxy_hide_header Cache-Control;
+	proxy_hide_header Expires;
+	proxy_hide_header onion-location;
+	proxy_hide_header strict-transport-security;
+	proxy_hide_header content-security-policy;
+	proxy_hide_header x-frame-options;
+}
 location /api/v1/services {
 	proxy_pass $mempoolSpaceServices;
 	proxy_cache services;