johanels/photoprism
1
0
Fork 0
mirror of https://github.com/photoprism/photoprism.git synced 2025-12-12 00:34:13 +01:00
Code Issues Packages Projects Releases Wiki Activity

Server: Add "trusted-platform" config option

Browse Source 
Signed-off-by: Michael Mayer <michael@photoprism.app>
This commit is contained in:
Michael Mayer
2025-08-01 13:51:03 +02:00
parent 31901ff2e3
commit 98e9daf687
7 changed files with 54 additions and 21 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
internal/server/start.go
View File

@@ -47,13 +47,22 @@ func Start(ctx context.Context, conf *config.Config) {
// Create new router engine without standard middleware.
router := gin.New()
// Set proxy addresses from which headers related to the client and protocol can be trusted.
if err := router.SetTrustedProxies(conf.TrustedProxies()); err != nil {
log.Warnf("server: %s", err)
// Set proxy from which headers related to the client and protocol can be trusted?
if trustedProxies := conf.TrustedProxies(); len(trustedProxies) > 0 {
if err := router.SetTrustedProxies(trustedProxies); err != nil {
log.Warnf("server: %s", err)
}
router.RemoteIPHeaders = conf.ProxyClientHeaders()
}
// Set proxy addresses from which headers related to the client and protocol can be trusted.
router.RemoteIPHeaders = conf.ProxyIPHeaders()
// Set trusted platform client IP address header name?
if trustedPlatform := conf.TrustedPlatform(); trustedPlatform != "" {
router.TrustedPlatform = trustedPlatform
// Enable support for HTTP/2 without TLS.
router.UseH2C = true
}
// Register panic recovery middleware.
router.Use(Recovery())