Merge pull request #19 from szaimen/enh/16/trust-aio-gateway

trust the nextcloud-aio gateway
szaimen · Jan 13, 2024 · 3021a25 · 3021a25
2 parents 04916ff + 88e1906
commit 3021a25
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 0 deletions.
diff --git a/Caddyfile b/Caddyfile
@@ -5,6 +5,10 @@
         root /data/caddy
     }
 
+    servers {
+        trusted_proxies placeholder
+    }
+
     log {
         level ERROR
     }

diff --git a/start.sh b/start.sh
@@ -16,6 +16,13 @@ while ! [ -f /nextcloud/admin/files/nextcloud-aio-caddy/allowed-countries.txt ];
     sleep 5
 done
 
+# Get ipv4-address of caddy
+IPv4_ADDRESS="$(dig nextcloud-aio-caddy A +short +search | head -1)"
+# Bring it in CIDR notation
+# shellcheck disable=SC2001
+IPv4_ADDRESS="$(echo "$IPv4_ADDRESS" | sed 's|[0-9]\+$|1/32|')"
+sed -i "s|trusted_proxies.*|trusted_proxies static $IPv4_ADDRESS|" /Caddyfile
+
 ALLOW_CONTRIES="$(head -n 1 /nextcloud/admin/files/nextcloud-aio-caddy/allowed-countries.txt)"
 if echo "$ALLOW_CONTRIES" | grep -q '^[A-Z ]\+$'; then
     FILTER_SET=1