diff --git a/deployment/nginx/ui-dashboard.gnerim.ru.conf b/deployment/nginx/ui-dashboard.gnerim.ru.conf index accd0d44..cdc3b3f9 100644 --- a/deployment/nginx/ui-dashboard.gnerim.ru.conf +++ b/deployment/nginx/ui-dashboard.gnerim.ru.conf @@ -88,6 +88,11 @@ server { proxy_cache_lock on; proxy_cache_use_stale error timeout updating http_403 http_500 http_502 http_503 http_504; proxy_cache_bypass $http_cache_control; + # Same rationale as /api/dictionary/ — refuse to cache the WAF + # block page (text/html). Prevents `proxy_cache_use_stale` from + # later serving that HTML as a stale 200 when the WAF returns 403 + # on a fresh fetch. + proxy_no_cache $no_cache_html; add_header X-Cache-Status $upstream_cache_status always; }