Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Extend the fail2ban instructions with a hint on how to make X-Real-IP… #16446

Merged
merged 4 commits into from
Jul 16, 2021

Conversation

dosera
Copy link
Contributor

@dosera dosera commented Jul 15, 2021

Following the merging of #14959 - Gitea is a lot more strict regarding the interpretation of X-Real-IP and X-Forwarded-For headers.

This PR updates the fail2ban documentation to include hints to set: REVERSE_PROXY_TRUSTED_PROXIES and REVERSE_PROXY_LIMIT appropriately.

See discussion in #16443

@GiteaBot GiteaBot added the lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. label Jul 15, 2021
@codecov-commenter
Copy link

codecov-commenter commented Jul 15, 2021

Codecov Report

Merging #16446 (88e1b26) into main (7b31aae) will increase coverage by 0.02%.
The diff coverage is n/a.

Impacted file tree graph

@@            Coverage Diff             @@
##             main   #16446      +/-   ##
==========================================
+ Coverage   45.42%   45.45%   +0.02%     
==========================================
  Files         717      717              
  Lines       84182    84182              
==========================================
+ Hits        38237    38262      +25     
+ Misses      39790    39775      -15     
+ Partials     6155     6145      -10     
Impacted Files Coverage Δ
modules/util/timer.go 42.85% <0.00%> (-42.86%) ⬇️
services/mailer/mail_comment.go 77.77% <0.00%> (-7.41%) ⬇️
modules/notification/mail/mail.go 36.27% <0.00%> (-1.97%) ⬇️
services/pull/pull.go 42.36% <0.00%> (+0.43%) ⬆️
services/gitdiff/gitdiff.go 74.23% <0.00%> (+0.97%) ⬆️
modules/queue/workerpool.go 54.19% <0.00%> (+1.14%) ⬆️
modules/git/blame.go 67.14% <0.00%> (+1.42%) ⬆️
services/pull/patch.go 55.93% <0.00%> (+1.69%) ⬆️
modules/process/manager.go 75.30% <0.00%> (+2.46%) ⬆️
services/pull/check.go 28.27% <0.00%> (+2.75%) ⬆️
... and 2 more

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 7b31aae...88e1b26. Read the comment docs.

@dosera dosera force-pushed the add-x-forwarded-headers-documentation branch from 9cd7f99 to ae56002 Compare July 15, 2021 22:22
@dosera dosera force-pushed the add-x-forwarded-headers-documentation branch from ae56002 to 60c2e1e Compare July 15, 2021 22:22
@GiteaBot GiteaBot added lgtm/need 1 This PR needs approval from one additional maintainer to be merged. and removed lgtm/need 2 This PR needs two approvals by maintainers to be considered for merging. labels Jul 15, 2021
@techknowlogick techknowlogick added type/docs This PR mainly updates/creates documentation skip-changelog This PR is irrelevant for the (next) changelog, for example bug fixes for unreleased features. labels Jul 15, 2021
Co-authored-by: zeripath <art27@cantab.net>
@GiteaBot GiteaBot added lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. and removed lgtm/need 1 This PR needs approval from one additional maintainer to be merged. labels Jul 16, 2021
@zeripath zeripath merged commit 95f4004 into go-gitea:main Jul 16, 2021
AbdulrhmnGhanem pushed a commit to kitspace/gitea that referenced this pull request Aug 10, 2021
go-gitea#16446)

Following the merging of go-gitea#14959 - Gitea is a lot more strict regarding the interpretation of `X-Real-IP` and `X-Forwarded-For` headers.

This PR updates the fail2ban documentation to include hints to set: `REVERSE_PROXY_TRUSTED_PROXIES` and `REVERSE_PROXY_LIMIT` appropriately.

See discussion in go-gitea#16443

Co-authored-by: zeripath <art27@cantab.net>
@go-gitea go-gitea locked and limited conversation to collaborators Oct 19, 2021
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
lgtm/done This PR has enough approvals to get merged. There are no important open reservations anymore. skip-changelog This PR is irrelevant for the (next) changelog, for example bug fixes for unreleased features. type/docs This PR mainly updates/creates documentation
Projects
None yet
Development

Successfully merging this pull request may close these issues.

6 participants