Fixes #1331: Added 'forwarded' section Unit config

Simplifies the listener configuration by using a wildcard for the IP and
adds a forwarded section that trusts all proxies on RFC1918 networks.
This commit is contained in:
Tobias Genannt 2024-11-05 12:52:50 +01:00 committed by Tobias Genannt
parent d573274e21
commit afd18c6f39

View File

@ -1,16 +1,20 @@
{
"listeners": {
"0.0.0.0:8080": {
"pass": "routes/main"
"*:8080": {
"pass": "routes/main",
"forwarded": {
"client_ip": "X-Forwarded-For",
"protocol": "X-Forwarded-Proto",
"source": ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
}
},
"[::]:8080": {
"pass": "routes/main"
},
"0.0.0.0:8081": {
"pass": "routes/status"
},
"[::]:8081": {
"pass": "routes/status"
"*:8081": {
"pass": "routes/status",
"forwarded": {
"client_ip": "X-Forwarded-For",
"protocol": "X-Forwarded-Proto",
"source": ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
}
}
},
"routes": {