From fcad82c4d4222596410be6c15fda55e3b6eda2a1 Mon Sep 17 00:00:00 2001
From: Jason Ertel <jason.ertel@securityonionsolutions.com>
Date: Thu, 26 Feb 2026 16:04:43 -0500
Subject: [PATCH] prevent caching of main doc to ensure logged out detection is
 processed

---
 salt/nginx/etc/nginx.conf | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/salt/nginx/etc/nginx.conf b/salt/nginx/etc/nginx.conf
index 7ebc23192..6b322c397 100644
--- a/salt/nginx/etc/nginx.conf
+++ b/salt/nginx/etc/nginx.conf
@@ -181,7 +181,7 @@ http {
 		ssl_prefer_server_ciphers on;
 		ssl_protocols TLSv1.2 TLSv1.3;
 
-		location ~* (^/login/.*|^/js/.*|^/css/.*|^/images/.*) {
+		location ~* (^/login/.*|^/js/.*|^/css/.*|^/images/.*|^/pages/.*|^/docs/.*) {
 			proxy_pass            http://{{ GLOBALS.manager }}:9822;
 			proxy_read_timeout    90;
 			proxy_connect_timeout 90;
@@ -213,6 +213,9 @@ http {
 			proxy_buffering         off;
 			proxy_cache             off;
 			proxy_request_buffering off;
+			add_header              Cache-Control "no-cache, no-store, must-revalidate";
+			add_header              Pragma "no-cache";
+			add_header              Expires "0";
 		}
 
 		location ~ ^/auth/.*?(login|oidc/callback) {