Skip to content

Conversation

@kesselb
Copy link
Contributor

@kesselb kesselb commented Feb 22, 2020

By default the ip address visible to Nextcloud is X-Real-IP if the request is coming from 10.0.0.0/8, 172.16.0.0/12 or 192.168.0.0/16.

That's a problem because Nextcloud will ignore HTTP_X_FORWARDED_HOST / HTTP_X_FORWARDED_PROTO and people see invalid (absolute) urls.

@kesselb kesselb requested review from J0WI and tilosp February 22, 2020 17:09
@kesselb kesselb requested a review from pierreozoux February 22, 2020 17:10
@kesselb kesselb force-pushed the feature/disable-remoteip2 branch from c9d691a to 4245e23 Compare February 22, 2020 17:10
@J0WI
Copy link
Contributor

J0WI commented Mar 30, 2020

There is another PR solving a similar issue: #1048
Do you have any preference or are both required?

@kesselb
Copy link
Contributor Author

kesselb commented Mar 30, 2020

There is another PR solving a similar issue: #1048
Do you have any preference or are both required?

I would like to disable mod rewriteip and not use the overwrite* variables. Without mod rewrite most setups behind nginx and traefik should work by setting trusted proxies out of the box.

The other PR is not ready from my pov. If you defined OVERWRITEWEBROOT (or any other variable) once it's not possible to unset it again due the config merge Nextcloud usually does. Using the proper default variable (or null) is required to workaround that limitation.

@J0WI
Copy link
Contributor

J0WI commented Apr 6, 2020

@kesselb this needs rebase

Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
@kesselb kesselb force-pushed the feature/disable-remoteip2 branch from 9cb1895 to 8f268a8 Compare April 6, 2020 19:05
Signed-off-by: Daniel Kesselberg <mail@danielkesselberg.de>
@kesselb kesselb force-pushed the feature/disable-remoteip2 branch from e2515a5 to 97d20ad Compare April 6, 2020 20:09
@J0WI J0WI merged commit 63438ef into master Apr 6, 2020
@delete-merged-branch delete-merged-branch bot deleted the feature/disable-remoteip2 branch April 6, 2020 20:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants