From dc460396aacc0c7516ceacaad55a84a84c888ffb Mon Sep 17 00:00:00 2001
From: Avunu LLC <mail@avu.nu>
Date: Wed, 11 Sep 2024 23:25:51 -0400
Subject: [PATCH] re-enable mu-plugins

---
 docker-entrypoint.sh    |  8 +++---
 mu-plugins/loopback.php | 64 +++++++++++++++++++++++++++++++++++++++++
 wordpress.nix           |  4 +++
 3 files changed, 72 insertions(+), 4 deletions(-)
 create mode 100644 mu-plugins/loopback.php

diff --git a/docker-entrypoint.sh b/docker-entrypoint.sh
index a7a5d32..f26255c 100644
--- a/docker-entrypoint.sh
+++ b/docker-entrypoint.sh
@@ -67,10 +67,10 @@ if [ ! -f /var/www/html/wp-includes/version.php ]; then
     install_wordpress
 fi
 
-# # Always copy the custom mu-plugins
-# echo "Copying custom mu-plugins"
-# cp -r /mu-plugins /var/www/html/wp-content/mu-plugins
-# chmod 755 /var/www/html/wp-content/mu-plugins
+# Always copy the custom mu-plugins
+echo "Copying custom mu-plugins"
+cp -r /mu-plugins /var/www/html/wp-content/mu-plugins
+chmod 755 /var/www/html/wp-content/mu-plugins
 
 # if PROC_TYPE=worker, then run cron jobs on the minute via wp-cli
 if [ "$PROC_TYPE" = "worker" ]; then
diff --git a/mu-plugins/loopback.php b/mu-plugins/loopback.php
new file mode 100644
index 0000000..a6082c2
--- /dev/null
+++ b/mu-plugins/loopback.php
@@ -0,0 +1,64 @@
+<?php
+/**
+ * Plugin Name: Internal URL Rewrite
+ * Description: Rewrites internal URLs for proper loopback and REST API functionality behind a reverse proxy
+ * Version: 1.0
+ * Author: Avunu LLC
+ * Author URI: https://avu.nu
+ * License: GPL2
+ * License URI: https://www.gnu.org/licenses/gpl-2.0.html
+ * Text Domain: internal-url-rewrite
+ *
+ * This plugin rewrites internal URLs to ensure proper functionality
+ * of WordPress when running behind a reverse proxy or in a containerized
+ * environment. It handles loopback requests, REST API calls, and other
+ * internal communications.
+ */
+
+// Ensure this file is being included by WordPress
+if (!defined('ABSPATH')) {
+    exit;
+}
+
+// Define allowed hosts for internal requests
+define('WP_ACCESSIBLE_HOSTS', 'localhost,127.0.0.1');
+
+// Function to rewrite URLs for internal requests
+function rewrite_internal_url($url) {
+    if ((defined('DOING_AJAX') && DOING_AJAX) || 
+        (defined('REST_REQUEST') && REST_REQUEST) ||
+        wp_doing_cron()) {
+        
+        $site_url = parse_url(get_site_url());
+        $url_parts = parse_url($url);
+        
+        // Only rewrite if the host matches the site's host
+        if (isset($url_parts['host']) && $url_parts['host'] === $site_url['host']) {
+            $url = set_url_scheme($url, 'http');
+            $url = str_replace($url_parts['host'], 'localhost', $url);
+        }
+    }
+    return $url;
+}
+
+// Apply URL rewriting to various WordPress URL functions
+add_filter('site_url', 'rewrite_internal_url', 10, 1);
+add_filter('home_url', 'rewrite_internal_url', 10, 1);
+add_filter('admin_url', 'rewrite_internal_url', 10, 1);
+add_filter('includes_url', 'rewrite_internal_url', 10, 1);
+add_filter('content_url', 'rewrite_internal_url', 10, 1);
+add_filter('plugins_url', 'rewrite_internal_url', 10, 1);
+add_filter('wp_get_attachment_url', 'rewrite_internal_url', 10, 1);
+
+// Force WordPress to use HTTP for loopback requests
+add_filter('http_request_args', function($args, $url) {
+    if (strpos($url, 'localhost') !== false || strpos($url, '127.0.0.1') !== false) {
+        $args['sslverify'] = false;
+        $args['curl'][CURLOPT_SSL_VERIFYPEER] = false;
+        $args['curl'][CURLOPT_SSL_VERIFYHOST] = false;
+    }
+    return $args;
+}, 10, 2);
+
+// Optionally, set the site URL for the REST API
+add_filter('rest_url', 'rewrite_internal_url', 10, 1);
\ No newline at end of file
diff --git a/wordpress.nix b/wordpress.nix
index 042ddce..da8a87b 100644
--- a/wordpress.nix
+++ b/wordpress.nix
@@ -148,6 +148,10 @@ pkgs.dockerTools.buildLayeredImage {
     cp ${./docker-entrypoint.sh} docker-entrypoint.sh
     chmod +x docker-entrypoint.sh
 
+    # copy must-use plugins
+    mkdir mu-plugins
+    cp ${./mu-plugins/loopback.php} mu-plugins/
+
     # Symlink CA certificates
     ln -s ${pkgs.cacert}/etc/ssl/certs/ca-bundle.crt etc/ssl/certs/ca-certificates.crt
   '';