vleeuwenmenno/dotfiles
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Remove redundant X-Forwarded headers and redirect domains
Some checks failed
Ansible Lint Check / check-ansible (push) Failing after 9s
Details
Nix Format Check / check-format (push) Failing after 21s
Details
Python Lint Check / check-python (push) Failing after 6s
Details

Browse Source
This commit is contained in:
Menno van Leeuwen
2025-07-22 21:53:22 +02:00
parent 506e568021
commit 4242e037b0
1 changed files with 8 additions and 22 deletions
Download Patch File Download Diff File Expand all files Collapse all files

30
config/ansible/tasks/servers/services/caddy/Caddyfile.j2
View File

@@ -95,9 +95,6 @@ home.vleeuwen.me {
reverse_proxy host.docker.internal:8123 { reverse_proxy host.docker.internal:8123 {
header_up Host {upstream_hostport} header_up Host {upstream_hostport}
header_up X-Real-IP {http.request.remote.host} header_up X-Real-IP {http.request.remote.host}
header_up X-Forwarded-For {http.request.remote.host}
header_up X-Forwarded-Proto {scheme}
header_up X-Forwarded-Host {host}
} }
tls {{ caddy_email }} tls {{ caddy_email }}
} }
@@ -108,7 +105,6 @@ unifi.mvl.sh {
tls_insecure_skip_verify tls_insecure_skip_verify
} }
header_up Host {host} header_up Host {host}
header_up X-Forwarded-Proto https
} }
tls {{ caddy_email }} tls {{ caddy_email }}
} }
@@ -119,7 +115,6 @@ hotspot.mvl.sh {
tls_insecure_skip_verify tls_insecure_skip_verify
} }
header_up Host {host} header_up Host {host}
header_up X-Forwarded-Proto https
} }
tls {{ caddy_email }} tls {{ caddy_email }}
} }
@@ -138,9 +133,6 @@ ip.mvl.sh ip.vleeuwen.me {
import country_block import country_block
reverse_proxy echoip:8080 { reverse_proxy echoip:8080 {
header_up X-Real-IP {http.request.remote.host} header_up X-Real-IP {http.request.remote.host}
header_up X-Forwarded-For {http.request.remote.host}
header_up X-Forwarded-Proto {scheme}
header_up X-Forwarded-Host {host}
} }
tls {{ caddy_email }} tls {{ caddy_email }}
} }
@@ -149,9 +141,6 @@ http://ip.mvl.sh http://ip.vleeuwen.me {
import country_block import country_block
reverse_proxy echoip:8080 { reverse_proxy echoip:8080 {
header_up X-Real-IP {http.request.remote.host} header_up X-Real-IP {http.request.remote.host}
header_up X-Forwarded-For {http.request.remote.host}
header_up X-Forwarded-Proto {scheme}
header_up X-Forwarded-Host {host}
} }
} }
@@ -163,22 +152,25 @@ overseerr.mvl.sh {
overseerr.vleeuwen.me { overseerr.vleeuwen.me {
import country_block import country_block
redir https://overseerr.mvl.sh redir https://overseerr.mvl.sh{uri}
tls {{ caddy_email }} tls {{ caddy_email }}
} }
plex.mvl.sh plex.vleeuwen.me { plex.mvl.sh {
import country_block import country_block
reverse_proxy host.docker.internal:32400 { reverse_proxy host.docker.internal:32400 {
header_up Host {upstream_hostport} header_up Host {upstream_hostport}
header_up X-Real-IP {http.request.remote.host} header_up X-Real-IP {http.request.remote.host}
header_up X-Forwarded-For {http.request.remote.host}
header_up X-Forwarded-Proto {scheme}
header_up X-Forwarded-Host {host}
} }
tls {{ caddy_email }} tls {{ caddy_email }}
} }
plex.vleeuwen.me {
import country_block
redir https://plex.mvl.sh{uri}
tls {{ caddy_email }}
}
drive.mvl.sh drive.vleeuwen.me { drive.mvl.sh drive.vleeuwen.me {
import country_block import country_block
@@ -191,9 +183,6 @@ drive.mvl.sh drive.vleeuwen.me {
reverse_proxy nextcloud:80 { reverse_proxy nextcloud:80 {
header_up Host {host} header_up Host {host}
header_up X-Real-IP {http.request.remote.host} header_up X-Real-IP {http.request.remote.host}
header_up X-Forwarded-For {http.request.remote.host}
header_up X-Forwarded-Proto {scheme}
header_up X-Forwarded-Host {host}
} }
} }
@@ -201,9 +190,6 @@ drive.mvl.sh drive.vleeuwen.me {
reverse_proxy nextcloud:80 { reverse_proxy nextcloud:80 {
header_up Host {host} header_up Host {host}
header_up X-Real-IP {http.request.remote.host} header_up X-Real-IP {http.request.remote.host}
header_up X-Forwarded-For {http.request.remote.host}
header_up X-Forwarded-Proto {scheme}
header_up X-Forwarded-Host {host}
} }
# Security headers # Security headers