feat: fix trusted proxies for wireguard setup
This commit is contained in:
parent
79f8eb4050
commit
0b2ba41bcb
|
@ -62,7 +62,7 @@ in {
|
||||||
phpOptions."opcache.interned_strings_buffer" = "32";
|
phpOptions."opcache.interned_strings_buffer" = "32";
|
||||||
settings = {
|
settings = {
|
||||||
default_phone_region = "DE";
|
default_phone_region = "DE";
|
||||||
trusted_proxies = [(lib.net.cidr.host config.secrets.secrets.global.net.ips.elisabeth config.secrets.secrets.global.net.privateSubnetv4)];
|
trusted_proxies = [nodes.elisabeth.config.wireguard.elisabeth.ipv4];
|
||||||
overwriteprotocol = "https";
|
overwriteprotocol = "https";
|
||||||
maintenance_window_start = 2;
|
maintenance_window_start = 2;
|
||||||
enabledPreviewProviders = [
|
enabledPreviewProviders = [
|
||||||
|
|
|
@ -85,7 +85,7 @@ in {
|
||||||
PAPERLESS_URL = "https://${paperlessdomain}";
|
PAPERLESS_URL = "https://${paperlessdomain}";
|
||||||
PAPERLESS_ALLOWED_HOSTS = paperlessdomain;
|
PAPERLESS_ALLOWED_HOSTS = paperlessdomain;
|
||||||
PAPERLESS_CORS_ALLOWED_HOSTS = "https://${paperlessdomain}";
|
PAPERLESS_CORS_ALLOWED_HOSTS = "https://${paperlessdomain}";
|
||||||
PAPERLESS_TRUSTED_PROXIES = lib.net.cidr.host config.secrets.secrets.global.net.ips.elisabeth config.secrets.secrets.global.net.privateSubnetv4;
|
PAPERLESS_TRUSTED_PROXIES = nodes.elisabeth.config.wireguard.elisabeth.ipv4;
|
||||||
|
|
||||||
PAPERLESS_APPS = "allauth.socialaccount.providers.openid_connect";
|
PAPERLESS_APPS = "allauth.socialaccount.providers.openid_connect";
|
||||||
|
|
||||||
|
|
Loading…
Reference in a new issue