From ed1846cd28ddb2134ef96d1dd14b12c744f7522b Mon Sep 17 00:00:00 2001
From: Girish Ramakrishnan <girish@cloudron.io>
Date: Wed, 28 Dec 2022 10:53:57 +0100
Subject: [PATCH] Trust reverse proxy IP

---
 app.ini.template | 3 ++-
 start.sh         | 2 ++
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/app.ini.template b/app.ini.template
index 39bac12..93d968d 100644
--- a/app.ini.template
+++ b/app.ini.template
@@ -64,7 +64,8 @@ SKIP_VERIFY = true
 ; those settings are protected and can't be modified
 INSTALL_LOCK = true
 SECRET_KEY = ##SECRET_KEY
-
+REVERSE_PROXY_LIMIT = 1
+REVERSE_PROXY_TRUSTED_PROXIES = *
 
 [service]
 DISABLE_REGISTRATION = false
diff --git a/start.sh b/start.sh
index ba2e40d..a502a27 100755
--- a/start.sh
+++ b/start.sh
@@ -117,6 +117,8 @@ crudini --set "/run/gitea/app.ini" mailer PASSWD "${CLOUDRON_MAIL_SMTP_PASSWORD}
 crudini --set "/run/gitea/app.ini" mailer FROM "${CLOUDRON_MAIL_FROM}"
 crudini --set "/run/gitea/app.ini" mailer SKIP_VERIFY "true"
 crudini --set "/run/gitea/app.ini" security INSTALL_LOCK "true"
+crudini --set "/run/gitea/app.ini" security REVERSE_PROXY_LIMIT 1
+crudini --set "/run/gitea/app.ini" security REVERSE_PROXY_TRUSTED_PROXIES "*"
 crudini --set "/run/gitea/app.ini" log MODE "console"
 crudini --set "/run/gitea/app.ini" log ROOT_PATH "/run/gitea"
 crudini --set "/run/gitea/app.ini" indexer ISSUE_INDEXER_PATH "/app/data/appdata/indexers/issues.bleve"