Merge branch '21-x-forwarded-headers' of gitlab.tetras-libre.fr:rekall/memorekall-member-new

config/packages/framework.yaml

@@ -3,6 +3,8 @@ framework:
     secret: '%env(APP_SECRET)%'
     #csrf_protection: true
     http_method_override: false
+    trusted_proxies: '127.0.0.1,REMOTE_ADDR'
+    trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port']
 
     # Enables session support. Note that the session will ONLY be started if you read or write from it.
     # Remove or comment this section to explicitly disable session support.

traefik.yml

@@ -12,7 +12,7 @@ services:
       - "traefik.http.routers.${NAME}.rule=Host(${HOST})"
       - "traefik.http.routers.${NAME}.tls.certresolver=myresolver"
       - "traefik.http.routers.${NAME}.entrypoints=web,websecure"
-      - "traefik.http.routers.${NAME}.middlewares=hardening@docker"
+      - "traefik.http.routers.${NAME}.middlewares=hardening@docker,xforwardedproto@docker,xforwardedport@docker"
 
 
 networks: