diff options
| author | Michael Peter Christen <mc@yacy.net> | 2026-07-12 17:16:24 +0200 |
|---|---|---|
| committer | Michael Peter Christen <mc@yacy.net> | 2026-07-12 17:16:24 +0200 |
| commit | ece7985d9435843989c36395c6dd2db2f0b9e933 (patch) | |
| tree | b54c2eb1f273a4c716470b5aa90ab67b83b35a4b /defaults | |
| parent | 92e0b111a0ce98964e4de3600d1a81643313ed7e (diff) | |
proper IP recognition using header X-Real-IP when YaCy is behind a
reverse proxy
Diffstat (limited to 'defaults')
| -rw-r--r-- | defaults/yacy.init | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/defaults/yacy.init b/defaults/yacy.init index 545a51780..471a39ec2 100644 --- a/defaults/yacy.init +++ b/defaults/yacy.init @@ -30,6 +30,12 @@ upnp.remoteHost = #iptables -t nat -A PREROUTING -p tcp -s 192.168.24.0/16 --dport 80 -j DNAT --to 192.168.24.1:8090
#(of course you need to customize the ips)
bindPort =
+ +# Comma-separated regular expressions matching trusted reverse-proxy socket IPs. +# X-Real-IP is used for access tracking only when the direct connection comes +# from one of these addresses. Authentication and access control always use the +# direct socket IP. Keep this list restricted to proxies controlled by you. +server.reverseProxy.trusted=127[.]0[.]0[.]1,0:0:0:0:0:0:0:1,::1 # TLS/SSL support:
#
|