ik/rf4-spotter
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

fix: narrow production proxy trust network

Browse Source
This commit is contained in:
ik
2026-09-22 20:36:33 +07:00
parent d7d1a2873a
commit 14ccfec5e6
3 changed files with 11 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.production.example
+3 -2
View File
@@ -14,8 +14,9 @@ PUBLIC_CACHE_SECONDS=20
ADMIN_TOKEN=replace-with-at-least-32-random-characters
RATE_LIMIT_SECRET=replace-with-at-least-32-random-characters
# Caddy is trusted only from the private Docker network; use the exact edge CIDR if customized.
TRUSTED_PROXY_CIDRS=172.16.0.0/12,127.0.0.1/32,::1/128
# Keep these two values aligned if the Docker edge network is customized.
EDGE_NETWORK_SUBNET=172.30.0.0/24
TRUSTED_PROXY_CIDRS=172.30.0.0/24,127.0.0.1/32,::1/128
ADMIN_BASIC_USER=rf4admin
# Generate with: docker run --rm caddy:2.10.2-alpine caddy hash-password --plaintext 'YOUR PASSWORD'
ADMIN_BASIC_PASSWORD_HASH='replace-with-caddy-password-hash'