case 4732 - trusted reverse proxies setting

New config setting AYANOVA_TRUSTED_PROXIES (IP addresses or CIDR networks)
for reverse proxies on another computer: their X-Forwarded-For is used, a
chain of trusted proxies is followed, invalid entries are warned at boot.
X-Forwarded-For from a proxy that is not trusted logs one warning per server
start naming the proxy's address. Without the setting nothing changes (only
a loopback proxy is trusted). Shown in server info; manual page, Linux install
note, changelog. F6 follow-up recorded.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
This commit is contained in:
2026-10-25 12:58:01 -07:00
parent 344106ae27
commit c04de33af2
10 changed files with 100 additions and 1 deletions

View File

@@ -200,6 +200,7 @@ nav:
- "SMTP certificate check": "ops-config-smtp-accept-any-certificate.md"
- "Security and JWT web tokens": "ops-config-jwt-secret.md"
- "SuperUser password reset": "ops-config-set-superuser-pw.md"
- "Trusted reverse proxies": "ops-config-trusted-proxies.md"
- "Server error codes": "ops-error-codes.md"
- "Migrating from AyaNova 7": "ops-import-v7.md"
- "Metrics": "ops-metrics.md"