yusufipek/OpenFrame
1
0
Fork 0
mirror of https://github.com/yusufipk/OpenFrame.git synced 2026-09-11 17:46:06 +00:00
Code Issues Packages Projects Releases Wiki Activity

feat(env): add trusted proxy mode configuration for rate limiting

Browse Source
This commit is contained in:
Yusuf İpek
2026-04-10 21:39:30 +03:00
parent 288c5d2624
commit eca3f92e71
1 changed files with 7 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
.env.docker.example
+7
View File
@@ -21,6 +21,13 @@ OPENFRAME_ENABLE_BUNNY_UPLOADS="false"
OPENFRAME_REQUIRE_INVITE_CODE="false" OPENFRAME_REQUIRE_INVITE_CODE="false"
SELF_HOSTED_AUTO_CREATE_BUCKET="true" SELF_HOSTED_AUTO_CREATE_BUCKET="true"
# Trusted reverse proxy mode — controls which headers getClientIp() trusts for rate limiting.
# Set this only when you have confirmed that your proxy strips/overwrites client-supplied headers.
# cloudflare — trust cf-connecting-ip (Cloudflare edge in front of the origin)
# nginx — trust x-real-ip / last x-forwarded-for (Nginx real_ip_header with set_real_ip_from)
# Leave unset for local dev or when no trusted proxy is in place.
TRUSTED_PROXY_MODE="nginx"
# MinIO-backed S3 storage # MinIO-backed S3 storage
MINIO_ROOT_USER="replace-with-minio-root-user" MINIO_ROOT_USER="replace-with-minio-root-user"
MINIO_ROOT_PASSWORD="replace-with-strong-minio-password" MINIO_ROOT_PASSWORD="replace-with-strong-minio-password"