mirror of
https://github.com/telemt/telemt.git
synced 2026-04-15 01:24:09 +03:00
Merge pull request #673 from Artymediys/main
docs: align LTO notes, API docs, and Fake-TLS guidance
This commit is contained in:
@@ -1807,7 +1807,8 @@ This document lists all configuration keys accepted by `config.toml`.
|
||||
```
|
||||
## proxy_protocol_trusted_cidrs
|
||||
- **Constraints / validation**: `IpNetwork[]`.
|
||||
- If omitted, defaults to trust-all CIDRs (`0.0.0.0/0` and `::/0`).
|
||||
- If omitted, defaults to trust-all CIDRs (`0.0.0.0/0` and `::/0`).
|
||||
> In production behind HAProxy/nginx, prefer setting explicit trusted CIDRs instead of relying on this fallback.
|
||||
- If explicitly set to an empty array, all PROXY headers are rejected.
|
||||
- **Description**: Trusted source CIDRs allowed to provide PROXY protocol headers (security control).
|
||||
- **Example**:
|
||||
@@ -2299,7 +2300,8 @@ Note: This section also accepts the legacy alias `[server.admin_api]` (same sche
|
||||
|
||||
## tls_domain
|
||||
- **Constraints / validation**: Must be a non-empty domain name. Must not contain spaces or `/`.
|
||||
- **Description**: Primary TLS domain used in FakeTLS handshake profile and as the default SNI domain.
|
||||
- **Description**: Primary domain used for Fake-TLS masking / fronting profile and as the default SNI domain presented to clients.
|
||||
This value becomes part of generated `ee` links, and changing it invalidates previously generated links.
|
||||
- **Example**:
|
||||
|
||||
```toml
|
||||
|
||||
Reference in New Issue
Block a user