From f0210cd7984343d06a0addcc83fff5adeff1057c Mon Sep 17 00:00:00 2001
From: Kyle Spearrin <kyle.spearrin@gmail.com>
Date: Fri, 28 Aug 2020 13:44:01 -0400
Subject: [PATCH] correct identity pathing from nginx

---
 util/Setup/Templates/NginxConfig.hbs | 13 +++++++++----
 1 file changed, 9 insertions(+), 4 deletions(-)

diff --git a/util/Setup/Templates/NginxConfig.hbs b/util/Setup/Templates/NginxConfig.hbs
index 65493c0969..e8cc216db5 100644
--- a/util/Setup/Templates/NginxConfig.hbs
+++ b/util/Setup/Templates/NginxConfig.hbs
@@ -100,10 +100,6 @@ server {
     proxy_pass http://api:5000/;
   }
 
-  location /identity/ {
-    proxy_pass http://identity:5000/;
-  }
-
   location /sso/ {
     proxy_pass http://sso:5000/;
   }
@@ -126,6 +122,15 @@ server {
     proxy_pass http://events:5000/;
   }
 
+  location /identity {
+    proxy_pass http://identity:5000;
+{{#if Ssl}}
+    include /etc/nginx/security-headers-ssl.conf;
+{{/if}}
+    include /etc/nginx/security-headers.conf;
+    add_header X-Frame-Options SAMEORIGIN;
+  }
+
   location /admin {
     proxy_pass http://admin:5000;
 {{#if Ssl}}