From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <pve-devel-bounces@lists.proxmox.com>
Received: from firstgate.proxmox.com (firstgate.proxmox.com [212.224.123.68])
	by lore.proxmox.com (Postfix) with ESMTPS id AD32D1FF16B
	for <inbox@lore.proxmox.com>; Thu, 12 Dec 2024 04:35:33 +0100 (CET)
Received: from firstgate.proxmox.com (localhost [127.0.0.1])
	by firstgate.proxmox.com (Proxmox) with ESMTP id 52B8C1233B;
	Thu, 12 Dec 2024 04:35:38 +0100 (CET)
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20230601; t=1733974498; x=1734579298;
 h=content-transfer-encoding:mime-version:references:in-reply-to
 :message-id:date:subject:cc:to:from:x-gm-message-state:from:to:cc
 :subject:date:message-id:reply-to;
 bh=isxT+hAhkPs7ItRyQMharFAa+g5I5MDWCVUubeyqCC8=;
 b=YoKDnjmU3ySo3iHdf/8SyXanJkfC0GkN4V0ZWUU5Y7c5CDgzvVanSerA7vSOG8s/ku
 3cV4q/PwaTX356kWI5qk6je+yZp5aqrAMKjr3tTyQB3Lj9/8T6MgKqvwEkvdaXHOZ9rI
 K91c9eON9lZndzo9irU+KU6o0uq6ubj4Ga0iyUdswjZE0dln4zr8tpsKCSrROa4GV39m
 utrYAW2uKz6rS5IwkFmXvSuRNqFtq6zhHkczxx1yW8R+3p9UivO+CSzHriMPVFd6DIAw
 zXvddhNwSKiXaHrE4YdzMnZkILnDHEAgDr+7WCjf8ArIhG+3TjBmk/CyS6/JIoWGm968
 0diw==
X-Gm-Message-State: AOJu0Yz+hbqc2SXL2XTTVqfcR3LiooaPW/6oekX1AD0VXWw/HCMYwr+7
 dx5wgKLDRurPC/UO5ubsh2b2gm6VpWMenlL+DIW3sP2XLMBzEkk+8GG6FHbK
X-Gm-Gg: ASbGncsndUpH6Zf4t4JoqP0dD5irbvTbjrlGkmAfH9j+8SqVuzA77HdLgZiI0Ylq0gd
 yqXCryH2pc6I+Th/yhb8fkmZdQCt2bXBAU8sQ9mOKlP0WUANY+X+yB27TifmAELlT1eUxL05iSj
 +ckxY7zCCUVan/JpegGlfUJVH+sIJGdXY5PBXvRSCGbFAO/SxG79Eoiacuavb+6DMQcl16Lmz49
 c/XepMfgYX5JmAIvv0STXVKiP6yVSiUt87nRU0QsT73DirG2i0skJCUYjDro3SlhlvPgyBIo4Ue
 a4/m/tnN9Gu3s13eI4GWDjGN4zNMy2k+viOhiFwaaboMfKdj3brTvADJ2L3XCMdPTBT28Q==
X-Google-Smtp-Source: AGHT+IGICvtBAs08yHrUGumAC2bpOTfs2MIqftkTD80DB6Vh0MZauSIaEGUnd18eNe2a3u+cCeljZg==
X-Received: by 2002:a05:690c:d95:b0:6ef:7f89:d923 with SMTP id
 00721157ae682-6f19e85cf7dmr19306547b3.31.1733974064708; 
 Wed, 11 Dec 2024 19:27:44 -0800 (PST)
From: Thomas Skinner <thomas@atskinner.net>
To: pve-devel@lists.proxmox.com
Date: Wed, 11 Dec 2024 21:27:06 -0600
Message-Id: <20241212032706.151121-4-thomas@atskinner.net>
X-Mailer: git-send-email 2.39.5
In-Reply-To: <20241212032706.151121-1-thomas@atskinner.net>
References: <20241212032706.151121-1-thomas@atskinner.net>
MIME-Version: 1.0
X-SPAM-LEVEL: Spam detection results:  0
 AWL 0.024 Adjusted score from AWL reputation of From: address
 BAYES_00                 -1.9 Bayes spam probability is 0 to 1%
 DMARC_MISSING             0.1 Missing DMARC policy
 FREEMAIL_FORGED_FROMDOMAIN 0.001 2nd level domains in From and EnvelopeFrom
 freemail headers are different
 FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
 HEADER_FROM_DIFFERENT_DOMAINS 0.249 From and EnvelopeFrom 2nd level mail
 domains are different
 KAM_DMARC_STATUS 0.01 Test Rule for DKIM or SPF Failure with Strict Alignment
 RCVD_IN_DNSWL_NONE     -0.0001 Sender listed at https://www.dnswl.org/,
 no trust RCVD_IN_MSPIKE_H2      -0.001 Average reputation (+2)
 RCVD_IN_VALIDITY_CERTIFIED_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more
 information.
 RCVD_IN_VALIDITY_RPBL_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more
 information.
 RCVD_IN_VALIDITY_SAFE_BLOCKED 0.001 ADMINISTRATOR NOTICE: The query to
 Validity was blocked. See
 https://knowledge.validity.com/hc/en-us/articles/20961730681243 for more
 information.
 SPF_HELO_NONE           0.001 SPF: HELO does not publish an SPF Record
 SPF_PASS               -0.001 SPF: sender matches SPF record
Subject: [pve-devel] [PATCH manager v2 3/3] fix #5699: pveproxy: add
 settings for real IP support
X-BeenThere: pve-devel@lists.proxmox.com
X-Mailman-Version: 2.1.29
Precedence: list
List-Id: Proxmox VE development discussion <pve-devel.lists.proxmox.com>
List-Unsubscribe: <https://lists.proxmox.com/cgi-bin/mailman/options/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=unsubscribe>
List-Archive: <http://lists.proxmox.com/pipermail/pve-devel/>
List-Post: <mailto:pve-devel@lists.proxmox.com>
List-Help: <mailto:pve-devel-request@lists.proxmox.com?subject=help>
List-Subscribe: <https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel>, 
 <mailto:pve-devel-request@lists.proxmox.com?subject=subscribe>
Reply-To: Proxmox VE development discussion <pve-devel@lists.proxmox.com>
Cc: Thomas Skinner <thomas@atskinner.net>
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
Errors-To: pve-devel-bounces@lists.proxmox.com
Sender: "pve-devel" <pve-devel-bounces@lists.proxmox.com>

Signed-off-by: Thomas Skinner <thomas@atskinner.net>
---
 PVE/Service/pveproxy.pm | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/PVE/Service/pveproxy.pm b/PVE/Service/pveproxy.pm
index ac108545..df3601bd 100755
--- a/PVE/Service/pveproxy.pm
+++ b/PVE/Service/pveproxy.pm
@@ -115,6 +115,8 @@ sub init {
 	    honor_cipher_order => $proxyconf->{HONOR_CIPHER_ORDER},
 	},
 	compression => $proxyconf->{COMPRESSION},
+	proxy_real_ip_header => $proxyconf->{PROXY_REAL_IP_HEADER},
+	proxy_real_ip_allow_from => $proxyconf->{PROXY_REAL_IP_ALLOW_FROM},
 	# Note: there is no authentication for those pages and dirs!
 	pages => {
 	    '/' => sub { get_index($self->{nodename}, @_) },
-- 
2.39.5


_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel