From 8fdad4c913106d0985ec1a0cba8728fe8b223166 Mon Sep 17 00:00:00 2001
From: Philipp Rothmann <philipprothmann@posteo.de>
Date: Mon, 8 May 2023 11:43:24 +0200
Subject: [PATCH] fix: set trusted proxies to 10.0.0.0/8

---
 abra.sh     | 16 +++++++++++++++-
 compose.yml |  2 +-
 2 files changed, 16 insertions(+), 2 deletions(-)

diff --git a/abra.sh b/abra.sh
index 5689405..f6ec561 100644
--- a/abra.sh
+++ b/abra.sh
@@ -35,7 +35,21 @@ set_app_config(){
     run_occ "config:app:set $APP $KEY --value '$VALUE'"
 }
 
-install_bbb(){
+set_system_config() {
+    KEY=$1
+    VALUE=$2
+    run_occ "config:system:set $KEY --value '$VALUE'"
+}
+
+set_trusted_proxies() {
+    trusted_proxies="$@"
+    if [ -z "$1" ]; then
+        trusted_proxies="$TRUSTED_PROXIES"
+    fi
+    set_system_config trusted_proxies "$trusted_proxies"
+}
+
+install_bbb() {
     install_apps bbb
     set_app_config bbb app.navigation true
     set_app_config bbb api.url "$BBB_URL"
diff --git a/compose.yml b/compose.yml
index cb6280f..e5547dc 100644
--- a/compose.yml
+++ b/compose.yml
@@ -64,7 +64,7 @@ services:
       - NEXTCLOUD_ADMIN_USER=${ADMIN_USER}
       - NEXTCLOUD_ADMIN_PASSWORD_FILE=/run/secrets/admin_password
       - NEXTCLOUD_TRUSTED_DOMAINS=${DOMAIN}
-      - TRUSTED_PROXIES=traefik
+      - TRUSTED_PROXIES=10.0.0.0/8
       - REDIS_HOST=cache
       - OVERWRITEPROTOCOL=https
       - PHP_MEMORY_LIMIT=1G