Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

just run-tags adjust-nextcloud-config and trusted_proxies #176

Open
nowatbuer opened this issue Mar 26, 2024 · 1 comment
Open

just run-tags adjust-nextcloud-config and trusted_proxies #176

nowatbuer opened this issue Mar 26, 2024 · 1 comment

Comments

@nowatbuer
Copy link

I already have installed matrix via matrix-docker-ansible-deploy. Now I want to setup nextcloud on the same server via mash-playbook.
As traefik is already running from the matrix-docker-ansible-deploy, in my vars file I have:

mash_playbook_reverse_proxy_type: other-traefik-container
mash_playbook_reverse_proxyable_services_additional_network: traefik

So I can install nextcloud on the same machine as matrix. Unfortunately in Nextcloud when I go to overview, I get this security & setup warning:

The configuration of the reverse proxy header is incorrect. This is a security problem and may allow an attacker to spoof your IP address so that it is visible to Nextcloud. You can find more information in the documentation.

I get rid of the message, when I add the ip raange of traefik as trusted_proxies in config.php:

'trusted_proxies' =>
array (
0 => '172.23.0.0/16',
),

I would have exepcted, this change is reflected by running
just run-tags adjust-nextcloud-config
But this does not seem to happen.
Maybe, this could be added somehow in the playbook, by doing something like
occ config:system:set trusted_proxies --value='{"0":"172.23.0.0/16", "1":"192.168.0.0/24"}'

@nowatbuer
Copy link
Author

The occ command did not create an array. These commands do:
./occ config:system:set trusted_proxies 1 --value="192.168.0.0/24"
./occ config:system:set trusted_proxies 0 --value="172.23.0.0/16"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant