dustin
/
configpolicy
1
1
Fork 0
Code Issues Releases Activity

nextcloud: Trust headers from public rev proxy 

If Nextcloud does not have the Internet-facing reverse proxy listed in
its "trusted proxies" setting, it will mark all traffic as being from
the proxy itself.  This breaks brute force detection, etc.
ntfy
Dustin 2021-12-20 22:20:09 -06:00
parent 7d7dda6061
commit 6acb25e309
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
group_vars/nextcloud.yml
View File

@ -9,6 +9,7 @@ pg_hba_extra:
nextcloud_trusted_proxies: nextcloud_trusted_proxies:
- 127.0.0.1 - 127.0.0.1
- ::1 - ::1
- '{{ lookup("dig", groups["public-web"][0]) }}'
nextcloud_trusted_domains: nextcloud_trusted_domains:
- nextcloud.pyrocufflink.net - nextcloud.pyrocufflink.net
- nextcloud.pyrocufflink.blue - nextcloud.pyrocufflink.blue