Fix real IP: trust upstream forwardedHeaders in Traefik, use X-Forwarded-For[0]

2026-05-14 07:41:51 +00:00
parent 73c7d006c7
commit a4b69b0018
2 changed files with 12 additions and 4 deletions
@@ -1,8 +1,18 @@
 entryPoints:
  web:
    address: ":80"
+    forwardedHeaders:
+      trustedIPs:
+        - "10.0.0.0/8"
+        - "172.16.0.0/12"
+        - "192.168.0.0/16"
  websecure:
    address: ":443"
+    forwardedHeaders:
+      trustedIPs:
+        - "10.0.0.0/8"
+        - "172.16.0.0/12"
+        - "192.168.0.0/16"

 providers:
  docker: