set x-forwarded-for as the only allowed proxy header

This commit is contained in:
deflax 2025-02-06 15:28:59 +00:00
parent 6e568394bf
commit bdec87840a

View file

@ -19,4 +19,4 @@ COPY . .
EXPOSE 8080
CMD [ "waitress-serve", "--port=8080", "--trusted-proxy='*'", "--trusted-proxy-headers='x-forwarded-for x-forwarded-proto x-forwarded-port'", "--log-untrusted-proxy-headers", "--threads=16", "--call", "api:create_app" ]
CMD [ "waitress-serve", "--port=8080", "--trusted-proxy='*'", "--trusted-proxy-headers=x-forwarded-for", "--log-untrusted-proxy-headers", "--threads=16", "--call", "api:create_app" ]