HASH 061713745ef2
DATE 2024-12-02
SUBJECT caddy: add cloudflare ipv4 addresses to trusted proxies
FILES 1 CHANGED
HASH 061713745ef2
DATE 2024-12-02
SUBJECT caddy: add cloudflare ipv4 addresses
to trusted proxies
FILES 1 CHANGED
┌─ modules/nixos/server/webserver/caddy.nix ─────────────────────────────────┐
│ diff --git a/modules/nixos/server/webserver/caddy.nix b/modules/nixos/server/webse │
│ rver/caddy.nix │
│ index 2d04d65..be8cd6a 100644 │
│ --- a/modules/nixos/server/webserver/caddy.nix │
│ +++ b/modules/nixos/server/webserver/caddy.nix │
│ @@ -19,10 +19,8 @@ in { │
│ package = self'.packages.caddy-with-cloudflare; │
│ globalConfig = '' │
│ servers { │
│ - trusted_proxies cloudflare { │
│ - interval 12h │
│ - timeout 15s │
│ - } │
│ + metrics │
│ + trusted_proxies static private_ranges 173.245.48.0/20 103.21.244.0/22 │
│ 103.22.200.0/22 103.31.4.0/22 141.101.64.0/18 108.162.192.0/18 190.93.240.0/20 18 │
│ 8.114.96.0/20 197.234.240.0/22 198.41.128.0/17 162.158.0.0/15 104.16.0.0/13 104.24 │
│ .0.0/14 172.64.0.0/13 131.0.72.0/22 │
│ } │
│ ''; │
│ }) │
└────────────────────────────────────────────────────────────────────────────────────┘
┌─ ...os/server/webserver/caddy.nix ───┐
│ diff --git a/modules/nixos/server/webserver/ │
│ caddy.nix b/modules/nixos/server/webserver/c │
│ addy.nix │
│ index 2d04d65..be8cd6a 100644 │
│ --- a/modules/nixos/server/webserver/caddy.n │
│ ix │
│ +++ b/modules/nixos/server/webserver/caddy.n │
│ ix │
│ @@ -19,10 +19,8 @@ in { │
│ package = self'.packages.caddy-with │
│ -cloudflare; │
│ globalConfig = '' │
│ servers { │
│ - trusted_proxies cloudflare { │
│ - interval 12h │
│ - timeout 15s │
│ - } │
│ + metrics │
│ + trusted_proxies static private_ │
│ ranges 173.245.48.0/20 103.21.244.0/22 103.2 │
│ 2.200.0/22 103.31.4.0/22 141.101.64.0/18 108 │
│ .162.192.0/18 190.93.240.0/20 188.114.96.0/2 │
│ 0 197.234.240.0/22 198.41.128.0/17 162.158.0 │
│ .0/15 104.16.0.0/13 104.24.0.0/14 172.64.0.0 │
│ /13 131.0.72.0/22 │
│ } │
│ ''; │
│ }) │
└──────────────────────────────────────────────┘
[ BACK TO LOG ]
──────────────────────────────────────────────────────────────────────────────────────
OOKNET
────────────────────────────────────────────────
OOKNET