digitaldemocratic/dd-apps/docker/nextcloud
Evilham 8f5de8af6a
[network] Fix handling of forwarded headers
This fixes several issues where services would see the internal IP of
the proxy and not that of the client.

It works by first unsetting any proxy-related headers that arrive from
the internet, then setting those as seen by HAProxy's entrypoint
frontend.
And finally making sure that neither WAF when enabled nor other
HAProxy backends touch these headers, while they are actually used by
the final services.

Services affected:	Netcloud, Keycloak, Moodle
2022-12-02 06:49:56 +01:00
..
nc_mail [mail] Refactor queue for easier maintenance, use name 2022-10-17 19:06:59 +02:00
src hide element icon-onlyoffice-new-docxf_element from menu by css using data-action 2022-11-24 08:43:06 +00:00
Dockerfile [mail] Refactor queue for easier maintenance, use name 2022-10-17 19:06:59 +02:00
dd-patch [dd-ctl] [nc] Add patches while they land upstream 2022-07-30 23:05:51 +02:00
nc-mail-update.sh [mail] Refactor queue for easier maintenance, use name 2022-10-17 19:06:59 +02:00
nc-queue.sh [mail] Refactor queue for easier maintenance, use name 2022-10-17 19:06:59 +02:00
nextcloud.yml [saml] Rework SAML handling 2022-09-23 19:14:02 +02:00
nginx.conf [network] Fix handling of forwarded headers 2022-12-02 06:49:56 +01:00
saml.sh conflicts resolved 2022-09-26 07:37:39 +00:00
supervisord.conf DD education workspace 2022-07-10 12:15:47 +02:00
template.docx DD education workspace 2022-07-10 12:15:47 +02:00