Page MenuHomeDevCentral

Allow Hauk to comply with new OpenStreetMap tiles server policy
Closed, ResolvedPublic

Description

We've noticed from a while some tiles are blocked at first when browsing on Hauk web interface.

This can be solved by proper server configuration in roles/paas-docker/nginx/files/vhosts/hauk.conf per wiki instructions:

For OpenStreetMap tile usage policy compliance, your Referrer-Policy should

Be one of: no-referrer-when-downgrade, origin, origin-when-cross-origin, strict-origin, strict-origin-when-cross-origin
Not be one of: no-referrer, same-origin

This is confirmed by this comment on Hauk issues tracker where add_header Referrer-Policy strict-origin-when-cross-origin is used.

What policy choose?

Referrer-PolicySame-origin requestsCross-origin requestsHTTPS → HTTP downgrade
no-referrer-when-downgradeFull URLFull URLNothing
originOrigin onlyOrigin onlyOrigin only
origin-when-cross-originFull URLOrigin onlyOrigin only
strict-originOrigin onlyOrigin onlyNothing
strict-origin-when-cross-originFull URLOrigin onlyNothing

For reference the denied values do:

Referrer-PolicySame-origin requestsCross-origin requestsHTTPS → HTTP downgrade
no-referrerNothingNothingNothing
same-originFull URLNothingNothing

The strict-origin-when-cross-origin proposed value by zell-mbc so makes sense.


See also:

Event Timeline

dereckson triaged this task as High priority.Wed, Jun 3, 10:49
dereckson created this task.

I've also submitted upstream the same nginx configuration change in the documentation @ https://github.com/bilde2910/Hauk/issues/240

dereckson closed this task as Resolved.EditedSun, Jun 7, 10:29

We aren't blocked by upstream, as it's a doc fix.

Our own nginx configuration is now live and problem is solved on geo.nasqueron.org with Referrer-Policy: strict-origin-when-cross-origin header now served.