sendnrw/netbird
2
0
Fork 0
mirror of https://github.com/netbirdio/netbird.git synced 2026-10-26 14:29:08 +01:00
Code Issues Packages Projects Releases Wiki Activity

[management] Only trust forwarded-IP headers from configured trusted peers (#7454)

Browse Source
This commit is contained in:
Bethuel Mmbaga
2026-09-11 15:41:52 +03:00
committed by GitHub
parent b57f0e5608
commit 58114f98fb
5 changed files with 240 additions and 25 deletions
Download Patch File Download Diff File Expand all files Collapse all files
infrastructure_files/getting-started-enterprise.sh
+3 -2
View File
@@ -808,8 +808,9 @@ server:
# Trust X-Forwarded-* only from the Traefik container's static address. Both
# keys must stay in step with the ipv4_address pinned in docker-compose.yml:
# trustedPeers decides whether forwarded headers are read at all, and leaving
# it unset falls back to 0.0.0.0/0.
# trustedPeers decides whether forwarded headers are read at all. Leaving it
# unset trusts nothing and records Traefik's own address as every peer's
# connection IP.
reverseProxy:
trustedPeers:
- "${TRAEFIK_IP}/32"