This commit is contained in:
Danila Yudin
2026-04-11 16:35:23 +03:00
committed by GitHub
9 changed files with 349 additions and 39 deletions

View File

@@ -1974,7 +1974,7 @@ This document lists all configuration keys accepted by `config.toml`.
## "cfg-server-proxy_protocol_trusted_cidrs"
- `proxy_protocol_trusted_cidrs`
- **Constraints / validation**: `IpNetwork[]`.
- If omitted, defaults to trust-all CIDRs (`0.0.0.0/0` and `::/0`).
- If omitted, defaults to an empty list and incoming PROXY headers are rejected.
- If explicitly set to an empty array, all PROXY headers are rejected.
- **Description**: Trusted source CIDRs allowed to provide PROXY protocol headers (security control).
- **Example**:
@@ -3328,4 +3328,3 @@ If your backend or network is very bandwidth-constrained, reduce cap first. If p
password = "secret"
```