Fixes #1331: Added 'forwarded' section Unit config

Simplifies the listener configuration by using a wildcard for the IP and
adds a forwarded section that trusts all proxies on RFC1918 networks.
This commit is contained in:
Tobias Genannt 2024-11-05 12:52:50 +01:00 committed by Tobias Genannt
parent d573274e21
commit afd18c6f39

View File

@ -1,16 +1,20 @@
{ {
"listeners": { "listeners": {
"0.0.0.0:8080": { "*:8080": {
"pass": "routes/main" "pass": "routes/main",
"forwarded": {
"client_ip": "X-Forwarded-For",
"protocol": "X-Forwarded-Proto",
"source": ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
}
}, },
"[::]:8080": { "*:8081": {
"pass": "routes/main" "pass": "routes/status",
}, "forwarded": {
"0.0.0.0:8081": { "client_ip": "X-Forwarded-For",
"pass": "routes/status" "protocol": "X-Forwarded-Proto",
}, "source": ["10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
"[::]:8081": { }
"pass": "routes/status"
} }
}, },
"routes": { "routes": {