Generalize reverse proxy source allowlist

2026-08-06 11:32:40 +00:00
parent 87cc2977d5
commit 5078f6f3b1
6 changed files with 55 additions and 19 deletions
@@ -24,7 +24,7 @@ http {

    allow 127.0.0.1;
    allow ::1;
-    allow ${CADDY_SOURCE_CIDR};
+    include /tmp/trusted-proxy-allow.conf;
    deny all;

    location = /healthz {