From c1835c40f06e87678047df8b5c5a09e4e404b37f Mon Sep 17 00:00:00 2001
From: autonomic-bot <64+autonomic-bot@noreply.git.autonomic.zone>
Date: Mon, 14 Sep 2026 16:43:27 +0000
Subject: [PATCH] =?UTF-8?q?reports.nix:=20pin=20non-browser=20UA=20on=20/p?=
 =?UTF-8?q?r/=20proxy=20=E2=80=94=20Gitea's=20Anubis=20307-challenges=20br?=
 =?UTF-8?q?owser=20UAs,=20turning=20every=20report=20STATUS=20cell=20into?=
 =?UTF-8?q?=20'=3F'?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 nix/modules/reports.nix | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/nix/modules/reports.nix b/nix/modules/reports.nix
index 775a88f..bcb62cc 100644
--- a/nix/modules/reports.nix
+++ b/nix/modules/reports.nix
@@ -33,6 +33,10 @@ let
             proxy_ssl_server_name on;
             proxy_set_header Host git.autonomic.zone;
             proxy_set_header Accept "application/json";
+            # Pin a non-browser UA: Gitea sits behind Anubis, which 307-challenges browser-like
+            # UAs to an un-CORS-able counter-domain — which would turn every STATUS cell into "?".
+            # A stable non-browser UA passes through (verified: curl 200, browser UA 307).
+            proxy_set_header User-Agent "ccci-reports-proxy/1.0";
             proxy_pass https://git.autonomic.zone/api/v1/repos/recipe-maintainers/$1/pulls/$2;
             proxy_intercept_errors off;
             proxy_connect_timeout 5s;