From a230d25376fbc49e5b50bf25ced65da0a8e8c364 Mon Sep 17 00:00:00 2001
From: Ee Durbin <ewdurbin@gmail.com>
Date: Sun, 8 Mar 2026 16:50:53 -0400
Subject: [PATCH] don't override host, breaks csrf

cabotage is now accepting this host header on the backend so no need to override
---
 infra/cdn/main.tf | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/infra/cdn/main.tf b/infra/cdn/main.tf
index 90684e8f4..91cac411e 100644
--- a/infra/cdn/main.tf
+++ b/infra/cdn/main.tf
@@ -32,7 +32,7 @@ resource "fastly_service_vcl" "python_org" {
     connect_timeout       = 1000
     first_byte_timeout    = 30000
     between_bytes_timeout = 10000
-    override_host         = var.backend_address
+    override_host         = var.subdomain == "www.test.python.org" ? "www.python.org" : null
   }
 
   backend {