feat: trusted ips #128

Merged
p4u1 merged 2 commits from forwarded-headers into master 2026-09-01 13:11:01 +00:00
Owner

when traefik is behind a reverse proxy, we need to tell it which
networks to trust with x-real-ip headers

when traefik is behind a reverse proxy, we need to tell it which networks to trust with x-real-ip headers <!-- Thank you for doing recipe maintenance work! Please mark all checklist items which are relevant for your changes. Please remove the checklist items which are not relevant for your changes. Feel free to remove this comment. --> * [x] I have deployed and tested my changes * [x] I have [updated relevant versions in `abra.sh`](https://docs.coopcloud.tech/maintainers/upgrade/#updating-versions-in-the-abrash) * [x] I have made my environment variable changes [backwards compatible](https://docs.coopcloud.tech/maintainers/upgrade/#backwards-compatible-environment-variable-changes) * [ ] I have added a [release note entry](https://docs.coopcloud.tech/maintainers/upgrade/#creating-new-release-notes)
fauno requested review from decentral1se 2026-07-28 20:10:37 +00:00
p4u1 reviewed 2026-07-28 20:49:53 +00:00
.env.sample Outdated
@@ -227,1 +227,4 @@
#ONION_ENABLED=1
# YAML array of trusted subnets
TRUSTED_IPS=
Owner

Nornally unused envs are commented out. Could we also do this here?

Nornally unused envs are commented out. Could we also do this here?
fauno marked this conversation as resolved
p4u1 reviewed 2026-07-28 20:50:38 +00:00
abra.sh Outdated
@@ -1,3 +1,3 @@
export TRAEFIK_YML_VERSION=v32
export TRAEFIK_YML_VERSION=v32a
Owner

Needs bump to 33, but nice to see others adopting my dirty hacks 😄

Needs bump to 33, but nice to see others adopting my dirty hacks 😄
Author
Owner

@p4u1 do i bump it to 34 now?

@p4u1 do i bump it to 34 now?
Owner

Yes please

Yes please
fauno marked this conversation as resolved
Owner

@fauno ping :)

@fauno ping :)
fauno force-pushed forwarded-headers from 488777367f to afa53bb3a0 2026-08-25 17:34:30 +00:00 Compare
p4u1 reviewed 2026-08-25 19:32:52 +00:00
.env.sample Outdated
@@ -237,1 +237,4 @@
#COMPOSE_FILE="$COMPOSE_FILE:compose.access-log.yml"
# YAML array of trusted subnets
#TRUSTED_IPS=
Owner

Could you add an example and / or link to traefik docs

Could you add an example and / or link to traefik docs
Author
Owner

added more context, let me know if it's ok

added more context, let me know if it's ok
Owner

If you could add a small heading like above with access logs its perfect :)

If you could add a small heading like above with access logs its perfect :)
Author
Owner

done!

done!
p4u1 marked this conversation as resolved
fauno added 1 commit 2026-08-25 19:46:50 +00:00
feat: trusted ips
continuous-integration/drone/pr Build is failing
7610c9f4db
when traefik is behind a reverse proxy, we need to tell it which
networks to trust with x-real-ip headers
fauno force-pushed forwarded-headers from afa53bb3a0 to 7610c9f4db 2026-08-25 19:46:50 +00:00 Compare
fauno added 1 commit 2026-08-25 21:08:46 +00:00
doc: trusted ips context
continuous-integration/drone/pr Build is failing
99936080ae
p4u1 approved these changes 2026-08-26 06:02:23 +00:00
p4u1 merged commit ca4f4113d9 into master 2026-09-01 13:11:01 +00:00
Sign in to join this conversation.