include config with proper trusted-proxies setting

abra.sh

@@ -1,2 +1,3 @@
 export ENTRYPOINT_VERSION=v1
-export PG_BACKUP_VERSION=v1
+export PG_BACKUP_VERSION=v1
+export CONFIG_VERSION=v1

compose.yml

@@ -7,6 +7,8 @@ services:
       - source: entrypoint
         target: /custom-entrypoint.sh
         mode: 0555
+      - source: config
+        target: /config.yaml
     entrypoint: /custom-entrypoint.sh
     environment:
       - GTS_HOST=${DOMAIN}
@@ -48,4 +50,8 @@ configs:
   entrypoint:
     name: ${STACK_NAME}_entrypoint_${ENTRYPOINT_VERSION}
     file: entrypoint.sh.tmpl
+    template_driver: golang  
+  config:
+    name: ${STACK_NAME}_config_${CONFIG_VERSION}
+    file: config.yaml.tmpl
     template_driver: golang

config.yaml

@@ -0,0 +1,24 @@
+# GoToSocial
+# Copyright (C) GoToSocial Authors admin@gotosocial.org
+# SPDX-License-Identifier: AGPL-3.0-or-later
+#
+# This program is free software: you can redistribute it and/or modify
+# it under the terms of the GNU Affero General Public License as published by
+# the Free Software Foundation, either version 3 of the License, or
+# (at your option) any later version.
+#
+# This program is distributed in the hope that it will be useful,
+# but WITHOUT ANY WARRANTY; without even the implied warranty of
+# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+# GNU Affero General Public License for more details.
+#
+# You should have received a copy of the GNU Affero General Public License
+# along with this program.  If not, see <http://www.gnu.org/licenses/>.
+
+###########################
+##### GENERAL CONFIG ######
+###########################
+protocol: "https"
+bind-address: "0.0.0.0"
+port: 8080
+trusted-proxies: [172.16.0.0/12, 10.0.0.0/8]

entrypoint.sh.tmpl

@@ -18,4 +18,4 @@ else
   echo "DB password secret not found, skipping."
 fi
 
-/gotosocial/gotosocial server start
+/gotosocial/gotosocial --config-path /config.yaml server start