boki/proxy-detection
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

added new config

Browse source
This commit is contained in:
Bojan Kucera 2025-06-05 22:52:35 -04:00
parent 14adf7d628
commit 1048ab5c20
1 changed files with 5 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

8
k8s-ingress.yaml
View file

@ -2,7 +2,7 @@ apiVersion: v1
kind: ConfigMap
metadata:
name: custom-headers
namespace: ingress
namespace: ingress # Correct namespace for your setup
data:
X-Real-IP: '$remote_addr'
X-Forwarded-For: '$proxy_add_x_forwarded_for'
@ -16,9 +16,8 @@ metadata:
cert-manager.io/cluster-issuer: letsencrypt-prod
nginx.ingress.kubernetes.io/ssl-redirect: "true"
nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
# Aggressive real IP configuration
# Use allowed annotations instead of snippets
nginx.ingress.kubernetes.io/proxy-set-headers: "ingress-nginx/custom-headers"
# Reference the ConfigMap in the correct namespace
nginx.ingress.kubernetes.io/proxy-set-headers: "ingress/custom-headers"
nginx.ingress.kubernetes.io/enable-real-ip: "true"
nginx.ingress.kubernetes.io/real-ip-header: "X-Forwarded-For"
labels:
@ -40,3 +39,4 @@ spec:
name: proxy-detection-service
port:
number: 80