From ece7985d9435843989c36395c6dd2db2f0b9e933 Mon Sep 17 00:00:00 2001 From: Michael Peter Christen Date: Sun, 12 Jul 2026 17:16:24 +0200 Subject: proper IP recognition using header X-Real-IP when YaCy is behind a reverse proxy --- defaults/yacy.init | 6 ++++++ 1 file changed, 6 insertions(+) (limited to 'defaults') diff --git a/defaults/yacy.init b/defaults/yacy.init index 545a51780..471a39ec2 100644 --- a/defaults/yacy.init +++ b/defaults/yacy.init @@ -30,6 +30,12 @@ upnp.remoteHost = #iptables -t nat -A PREROUTING -p tcp -s 192.168.24.0/16 --dport 80 -j DNAT --to 192.168.24.1:8090 #(of course you need to customize the ips) bindPort = + +# Comma-separated regular expressions matching trusted reverse-proxy socket IPs. +# X-Real-IP is used for access tracking only when the direct connection comes +# from one of these addresses. Authentication and access control always use the +# direct socket IP. Keep this list restricted to proxies controlled by you. +server.reverseProxy.trusted=127[.]0[.]0[.]1,0:0:0:0:0:0:0:1,::1 # TLS/SSL support: # -- cgit v1.2.3