From 2cafa4c2f097d30753527ed61dd3a2c9688807fe Mon Sep 17 00:00:00 2001
From: Arie Peterson <arie@greenhost.nl>
Date: Wed, 27 Jul 2022 12:37:28 +0200
Subject: [PATCH] Change nextcloud trusted_proxies to pod range
---
templates/nextcloud-onlyoffice-config.yaml | 8 ++++----
1 file changed, 4 insertions(+), 4 deletions(-)
diff --git a/templates/nextcloud-onlyoffice-config.yaml b/templates/nextcloud-onlyoffice-config.yaml
index 6ea899c3..2236d4de 100644
--- a/templates/nextcloud-onlyoffice-config.yaml
+++ b/templates/nextcloud-onlyoffice-config.yaml
@@ -87,9 +87,9 @@ data:
# All values in config.json are applied by the nextcloud occ command
# config:import.
# system.trusted_proxies contains a list of proxies that are considered
- # to be trusted. 10.43.0.0/16 contains all ip addresses that are
- # assigned to kubernetes services which includes the ip address of
- # the ingress service that functions as a proxy.
+ # to be trusted. 10.42.0.0/16 contains all ip addresses that are
+ # assigned to kubernetes pods, which includes the ip address of
+ # the ingress controller that functions as a reverse proxy.
# system.overwriteprotocol overwrites the protocol of links that are
# generated by nextcloud to HTTPS.
# apps.core.backgroundjobs_mode set to cron disables the unreliable ajax
@@ -99,7 +99,7 @@ data:
config.json: |
{
"system":{
- "trusted_proxies": "10.43.0.0/16",
+ "trusted_proxies": "10.42.0.0/16",
"overwriteprotocol": "https",
"appstoreenabled": false,
"debug": {{ .Values.nextcloud.debug | quote }}
--
GitLab