Skip to content

兼容 Caddy 2.5.0 变更造成部分 url 跳 http#790

Merged
icyleaf merged 1 commit into
developfrom
fix/set-x-forwarded-proto-to-https-since-caddy-2.5
Jun 15, 2022
Merged

兼容 Caddy 2.5.0 变更造成部分 url 跳 http#790
icyleaf merged 1 commit into
developfrom
fix/set-x-forwarded-proto-to-https-since-caddy-2.5

Conversation

@icyleaf

@icyleaf icyleaf commented Jun 15, 2022

Copy link
Copy Markdown
Member

解决 #788 #789

Caddy 2.5.0 涉及的点如下:

  • Reverse proxy: The X-Forwarded-Host header will now be automatically set, along with X-Forwarded-For and X-Forwarded-Proto.
  • ⚠️ Reverse proxy: Incoming X-Forwarded-* headers will no longer be automatically trusted, to prevent spoofing. Now, trusted_proxies must be configured to specify a list of downstream proxies which are trusted to have sent good values. You only need to configure trusted proxies if Caddy is not the first server being connected to. For example, if you have Cloudflare in front of Caddy, then you should configure this with Cloudflare's list of IP ranges.

@icyleaf icyleaf merged commit e6f5cf5 into develop Jun 15, 2022
@icyleaf icyleaf deleted the fix/set-x-forwarded-proto-to-https-since-caddy-2.5 branch June 15, 2022 07:54
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant