ZacharyZcR 872e5eba73 fix: check trusted proxy login against nginx's peer, not nginx (#1625) ...

The backend only sees the bundled nginx on loopback, so the allowlist
could only work by trusting 127.0.0.1, which let any client that reached
nginx log in as anyone by sending the identity headers. nginx now passes
its own TCP peer (before real_ip rewriting) in X-Termix-Proxy-Peer, and
loopback connections are judged by that address instead.

2026-10-14 08:12:58 +08:00

..

bundled-plugins.json

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

compose-dev.yml

release-2.8.0 (#1456)

2026-09-20 14:56:39 -05:00

docker-compose.yml

fix: check trusted proxy login against nginx's peer, not nginx (#1625)

2026-10-14 08:12:58 +08:00

Dockerfile

v26.10.1 (#1599)

2026-10-12 11:35:48 -05:00

entrypoint.sh

v26.10.0 (#1573)

2026-10-10 14:58:27 -05:00

nginx-https.conf

fix: check trusted proxy login against nginx's peer, not nginx (#1625)

2026-10-14 08:12:58 +08:00

nginx.conf

fix: check trusted proxy login against nginx's peer, not nginx (#1625)

2026-10-14 08:12:58 +08:00