IdP: add safeguard --idp-h-key and also require --xff-src

This commit is contained in:
ed
2024-03-12 22:57:47 +00:00
parent e8b7f65f82
commit d71f844b43
7 changed files with 55 additions and 7 deletions

View File

@@ -21,8 +21,11 @@
ansi # enable colors in log messages
#q # disable logging for more performance
# since copyparty is only accessible through traefik, disable safetycheck on x-forwarded-for
xff-src: any
# if we are confident that we got the docker-network config correct
# (meaning copyparty is only accessible through traefik, and
# traefik makes sure that all requests go through authelia),
# then disable the reverse-proxy source-ip safety check like this:
#xff-src: any
# enable IdP support by expecting username/groupname in
# http-headers provided by the reverse-proxy; header "X-IdP-User"