From eca1c70edbadb124ddae4c7954a861e582ae05d4 Mon Sep 17 00:00:00 2001
From: 134 <a134@134deMacBook-Pro.local>
Date: Fri, 10 Jul 2026 13:31:56 +0800
Subject: [PATCH] fix: route internal access checks over local HTTP

---
 proxy.ts | 29 +++++++++++++++++++++++++++--
 1 file changed, 27 insertions(+), 2 deletions(-)

diff --git a/proxy.ts b/proxy.ts
index e51c058be..e11bc088d 100644
--- a/proxy.ts
+++ b/proxy.ts
@@ -109,6 +109,31 @@ function isLoopbackIp(ip: string | null) {
   );
 }
 
+function getInternalAccessUrl(request: NextRequest, pathname: string) {
+  const configuredBaseUrl = process.env.ACCESS_LOG_INTERNAL_URL?.trim();
+  if (configuredBaseUrl) {
+    try {
+      return new URL(pathname, configuredBaseUrl);
+    } catch {
+      // Fall through to the self-hosted runtime address.
+    }
+  }
+
+  const port = process.env.PORT?.trim();
+  if (port && /^\d{1,5}$/.test(port)) {
+    return new URL(pathname, `http://127.0.0.1:${port}`);
+  }
+
+  const url = new URL(request.url);
+  if (url.hostname === "127.0.0.1" || url.hostname === "localhost") {
+    url.protocol = "http:";
+  }
+  url.pathname = pathname;
+  url.search = "";
+  url.hash = "";
+  return url;
+}
+
 function isRoutineAuthRead(pathname: string, method: string) {
   if (method !== "GET") return false;
   return (
@@ -171,7 +196,7 @@ async function checkManualIpBlock(
 
   try {
     const response = await fetch(
-      new URL("/api/internal/ip-blocklist/check", request.url),
+      getInternalAccessUrl(request, "/api/internal/ip-blocklist/check"),
       {
         method: "POST",
         headers: {
@@ -235,7 +260,7 @@ function queueAccessLog(
     ...payload,
   });
 
-  const writePromise = fetch(new URL("/api/internal/access-log", request.url), {
+  const writePromise = fetch(getInternalAccessUrl(request, "/api/internal/access-log"), {
     method: "POST",
     headers: {
       "content-type": "application/json",