summaryrefslogtreecommitdiff
path: root/example
diff options
context:
space:
mode:
authorLibravatar Tobi Smethurst <31960611+tsmethurst@users.noreply.github.com>2021-07-26 16:15:36 +0200
committerLibravatar GitHub <noreply@github.com>2021-07-26 16:15:36 +0200
commite2757ae6769758da766c7729f4b444a02414ecd0 (patch)
tree1754404193887503c64eefc4396065edd4d930e1 /example
parentMerge branch 'main' of github.com:superseriousbusiness/gotosocial into main (diff)
downloadgotosocial-e2757ae6769758da766c7729f4b444a02414ecd0.tar.xz
add trusted proxy for parsing client IPs (#115)
Diffstat (limited to 'example')
-rw-r--r--example/config.yaml8
1 files changed, 8 insertions, 0 deletions
diff --git a/example/config.yaml b/example/config.yaml
index 873ac8737..976c9a8f6 100644
--- a/example/config.yaml
+++ b/example/config.yaml
@@ -64,6 +64,14 @@ protocol: "https"
# Default: 8080
port: 8080
+# Array of string. CIDRs or IP addresses of proxies that should be trusted when determining real client IP from behind a reverse proxy.
+# If you're running inside a Docker container behind Traefik or Nginx, for example, add the subnet of your docker network,
+# or the gateway of the docker network, and/or the address of the reverse proxy (if it's not running on the host network).
+# Example: ["127.0.0.1/32", "172.20.0.1"]
+# Default: ["127.0.0.1/32"] (localhost)
+trustedProxies:
+ - "127.0.0.1/32"
+
############################
##### DATABASE CONFIG ######
############################