TRUSTED_PROXIES value for typical container + Cloudflare #2321
-
|
At https://docs.linuxserver.io/images/docker-lychee/#environment-variables-e it clearly states to not use (*) but instead: What does that mean? Does that mean use the internal private LAN IP of the docker host? The external public IP of the host? The incoming IP from Cloudflare? And further, if using those IP/netmask, how does that improve any security? Is it about preventing spoofing? Can you please elaborate? |
Beta Was this translation helpful? Give feedback.
Replies: 1 comment
-
That's not our page, so you should probably ask them. That said, it means Laravel will trust certain headers supplied by these IPs, such as
Probably the reverse proxy between you and the internet, that in turn is configured to believe CloudFlare and pass these headers on.
As you've found, they are not random. They even provide a list.
As above. |
Beta Was this translation helpful? Give feedback.
That's not our page, so you should probably ask them. That said, it means Laravel will trust certain headers supplied by these IPs, such as
X-Forwarded-For. I don't think the risk is especially high for Lychee, but we try to encourage best practice.Probably the reverse proxy between you and the internet, that in turn is configured to believe CloudFlare and pass these headers on.
As you've found, they are not random. They even…