Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Add support for setting trusted proxies #54

Merged
merged 2 commits into from
Apr 25, 2022
Merged

Add support for setting trusted proxies #54

merged 2 commits into from
Apr 25, 2022

Conversation

eikendev
Copy link
Member

This patch closes #53, addressing a warning by the Gin framework not to trust all proxies.

@CubicrootXYZ, in its current state the changes would break existing configurations where PushBits runs behind a proxy. One can make the case to force breaking these configurations for the sake of the user's security, so I'd like to have your input on this :)

@eikendev eikendev added enhancement New feature or request security labels Apr 24, 2022
@eikendev eikendev self-assigned this Apr 24, 2022
@eikendev
Copy link
Member Author

I added the -x,--proxy flag to pbcli to make debugging easier.

@CubicrootXYZ
Copy link
Collaborator

Does this really break the application? As far as I can see this only affects how the client IP is read. Do not see where we even use that?

@eikendev
Copy link
Member Author

Ah, you're actually right! Only thing that would change is the IP address shown in the log output: it would always show the IP of your proxy if that proxy is not configured as trusted.

@eikendev eikendev merged commit db3f669 into main Apr 25, 2022
@eikendev eikendev deleted the trustedproxies branch April 25, 2022 19:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request security
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Support configuration of trusted proxies
2 participants