gador/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

nixos/oauth2-proxy: fix warning condition (#520786)

Browse Source
This commit is contained in:
K900
2026-05-16 09:57:58 +00:00
committed by GitHub
parent 46e60b5f8c 2a6a67b8d4
commit deaf02d3d2
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
nixos/modules/services/security/oauth2-proxy.nix
+1 -1
View File
@@ -629,7 +629,7 @@ in
}
];
warnings = lib.mkIf (cfg.reverseProxy -> cfg.trustedProxyIP == [ ]) [
warnings = lib.mkIf (cfg.reverseProxy && cfg.trustedProxyIP == [ ]) [
''
When config.services.oauth2-proxy.reverseProxy is enabled, configure config.services.oauth2-proxy.trustedProxyIP to the IPs or CIDR range(s) of the reverse proxies that are allowed to send X-Forwarded-* headers.
If you leave it unset, OAuth2 Proxy currently trusts all source IPs for backwards compatibility, which means a client that can reach OAuth2 Proxy directly may be able to spoof forwarded headers.