CI / Build and push docker image (push) Successful in 1m25s
- bump kaya-core/kaya-rsgi to >= 0.0.3 and add kaya-forwarded: forwarded header handling is no longer built into core, it is opt-in via ForwardedHeadersMixin and gated on trusted proxy CIDRs - add TRUSTED_PROXY_CIDRS setting (comma-separated CIDRs, validated at startup; empty means no proxy is trusted) and wire the mixin in app.py - cover trusted/untrusted peers, all-trusted chains and the RFC 7239 Forwarded header with port in the test suite - document the new variable in README, .env.example and docker-compose.yml
16 lines
577 B
YAML
16 lines
577 B
YAML
services:
|
|
pyfconfig:
|
|
build: .
|
|
image: pyfconfig:latest
|
|
restart: unless-stopped
|
|
environment:
|
|
# Public name shown in the HTML page and the curl examples; set to the
|
|
# deployment domain (e.g. "ifconfig.example.com").
|
|
SITE_NAME: ${SITE_NAME:-pyfconfig}
|
|
# Comma-separated CIDRs of trusted reverse proxies (e.g.
|
|
# "172.16.0.0/12"); required for correct client IPs when deployed
|
|
# behind a reverse proxy. Empty means no proxy is trusted.
|
|
TRUSTED_PROXY_CIDRS: ${TRUSTED_PROXY_CIDRS:-}
|
|
ports:
|
|
- "127.0.0.1:8080:8080"
|