Chill-project/ansible-role-chill
6
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Update configs for trusted proxies, HTTPS, and log paths

Browse Source 
Revised proxy settings to dynamically include trusted IPs and ensured HTTPS redirections. Adjusted log mount path in Docker compose to align with application structure. Removed unused Traefik certificate volume for cleanup.
This commit is contained in:
Julien Fastré
2025-01-10 12:49:43 +01:00
parent e09224754f
commit 76dfaf5d93
3 changed files with 11 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

8
templates/config/prod/framework.yaml
View File

@@ -1,3 +1,7 @@
framework:
trusted_proxies: '172.0.0.0/8'
trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port']
trusted_proxies: '127.0.0.1,REMOTE_ADDR{% for ip in traefik_trusted_ips|default([]) %},{{ ip }}{% endfor %}'
trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port']
parameters:
router.request_context.scheme: 'https'
asset.request_context.secure: true