kosmos/HubFrontendDocker
1
0
Fork 0
Code Issues Pull Requests Actions Releases Activity

Prevent spoofed forwarded client IPs

Browse Source
This commit is contained in:
kosmos
2026-08-25 01:53:18 +00:00
parent 151cb7bf2e
commit 68fe59f2a0
1 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files
README.md
+4 -4
View File
@@ -82,7 +82,7 @@ server {
proxy_pass http://127.0.0.1:17777; proxy_pass http://127.0.0.1:17777;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
@@ -90,7 +90,7 @@ server {
proxy_pass http://127.0.0.1:18080; proxy_pass http://127.0.0.1:18080;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
} }
@@ -148,7 +148,7 @@ location ^~ /api/ {
proxy_pass http://127.0.0.1:17777; proxy_pass http://127.0.0.1:17777;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
@@ -156,7 +156,7 @@ location / {
proxy_pass http://127.0.0.1:18080; proxy_pass http://127.0.0.1:18080;
proxy_set_header Host $host; proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr; proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; proxy_set_header X-Forwarded-For $remote_addr;
proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-Proto $scheme;
} }
``` ```