From 36b73844af545376107c8e3272e918f791ae4d5d Mon Sep 17 00:00:00 2001 From: Rayhaan Jaufeerally Date: Sun, 20 Sep 2026 21:09:37 +0200 Subject: [PATCH] docs: keep Apache's /error/ pages out of the proxy so 401 prompts for a password Co-Authored-By: Claude Fable 5.1 --- docs/lab/prod/on-router/README.md | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/docs/lab/prod/on-router/README.md b/docs/lab/prod/on-router/README.md index 28e569f..bce6c9f 100644 --- a/docs/lab/prod/on-router/README.md +++ b/docs/lab/prod/on-router/README.md @@ -70,6 +70,16 @@ API and POSTs through the proxy, and events arriving within 50 ms): Require valid-user + # Apache's own error pages live under /error/ on servers with the + # multi-language error documents enabled. They must be served by + # Apache, not proxied, and must not themselves demand the password. + # Otherwise the 401 becomes ferrix's empty 404: a blank page and no + # password prompt in any browser without saved credentials. + + Require all granted + + ProxyPass "/error/" "!" + ProxyPreserveHost On ProxyPass "/" "http://127.0.0.1:8080/" ProxyPassReverse "/" "http://127.0.0.1:8080/"