astelm/telemt
1
0
Fork 0
mirror of https://github.com/telemt/telemt.git synced 2026-06-13 22:41:42 +03:00
Code Issues Packages Projects Releases Wiki Activity

Merge e507eeeb57 into 6d5a1a29df

Browse Source
This commit is contained in:
Artymediys
2026-04-11 22:08:26 +08:00
committed by GitHub
parent 6d5a1a29df e507eeeb57
commit f79a7dd139
8 changed files with 42 additions and 37 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
docs/Config_params/CONFIG_PARAMS.en.md
View File

@@ -1974,7 +1974,8 @@ This document lists all configuration keys accepted by `config.toml`.
## "cfg-server-proxy_protocol_trusted_cidrs"
- `proxy_protocol_trusted_cidrs`
- **Constraints / validation**: `IpNetwork[]`.
- If omitted, defaults to trust-all CIDRs (`0.0.0.0/0` and `::/0`).
- If omitted, defaults to trust-all CIDRs (`0.0.0.0/0` and `::/0`).
> In production behind HAProxy/nginx, prefer setting explicit trusted CIDRs instead of relying on this fallback.
- If explicitly set to an empty array, all PROXY headers are rejected.
- **Description**: Trusted source CIDRs allowed to provide PROXY protocol headers (security control).
- **Example**:
@@ -2506,7 +2507,8 @@ Note: This section also accepts the legacy alias `[server.admin_api]` (same sche
## "cfg-censorship-tls_domain"
- `tls_domain`
- **Constraints / validation**: Must be a non-empty domain name. Must not contain spaces or `/`.
- **Description**: Primary TLS domain used in FakeTLS handshake profile and as the default SNI domain.
- **Description**: Primary domain used for Fake-TLS masking / fronting profile and as the default SNI domain presented to clients.
This value becomes part of generated `ee` links, and changing it invalidates previously generated links.
- **Example**:
```toml