From 4f394401307175ca8a3eb893058597b672c25ade Mon Sep 17 00:00:00 2001
From: Andrey Polovov <andrey.polovov@flant.com>
Date: Thu, 5 Sep 2019 17:53:47 +0300
Subject: [PATCH] large_client_header_buffers 4 8k (default) -> 32k

---
 run-proxy | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/run-proxy b/run-proxy
index 322896c..fef1a1d 100755
--- a/run-proxy
+++ b/run-proxy
@@ -181,7 +181,6 @@ http {
     server_name ${HOSTNAME};
     listen ${LISTEN} ssl;
 
-
     ssl_protocols       TLSv1.2;
     ssl_certificate     /etc/nginx/server.crt;
     ssl_certificate_key /etc/nginx/server.key;
@@ -189,6 +188,8 @@ http {
     ssl_client_certificate /var/run/secrets/kubernetes.io/serviceaccount/ca.crt;
     ssl_verify_client on;
 
+    large_client_header_buffers 4 32k;
+
     location ${LOCATION} {
       if (\$ssl_client_s_dn_cn !~ "^${USER}$") {
         return 403;