From fb264bf7c6383c7959fc4129bdc1d5416eebf9c4 Mon Sep 17 00:00:00 2001
From: Sascha Lustenberger | techlan gmbh <sascha.lustenberger@techlan.ch>
Date: Mon, 23 Feb 2026 14:49:43 +0100
Subject: [PATCH] Fix: Add grpc_pass to NPM advanced_config for Management and
 Signal endpoints

---
 app/services/npm_service.py | 11 ++++++++++-
 1 file changed, 10 insertions(+), 1 deletion(-)

diff --git a/app/services/npm_service.py b/app/services/npm_service.py
index 7ab1c91..b84ef55 100644
--- a/app/services/npm_service.py
+++ b/app/services/npm_service.py
@@ -259,7 +259,16 @@ async def create_proxy_host(
         "block_exploits": True,
         "allow_websocket_upgrade": True,
         "access_list_id": 0,
-        "advanced_config": "",
+        "advanced_config": (
+            "location ^~ /management.ManagementService/ {\n"
+            f"    grpc_pass grpc://{forward_host}:{forward_port};\n"
+            "    grpc_set_header Host $host;\n"
+            "}\n"
+            "location ^~ /signalexchange.SignalExchange/ {\n"
+            f"    grpc_pass grpc://{forward_host}:{forward_port};\n"
+            "    grpc_set_header Host $host;\n"
+            "}\n"
+        ),
         "meta": {
             "letsencrypt_agree": True,
             "letsencrypt_email": admin_email,