diff options
| author | dizzy <diosmosis@users.noreply.github.com> | 2021-07-16 06:02:36 +0300 |
|---|---|---|
| committer | GitHub <noreply@github.com> | 2021-07-16 06:02:36 +0300 |
| commit | dc29fc3e39e3696b7c3f188f23d3fe415afa42bd (patch) | |
| tree | d9b565765c55dc4541cfd78d6112fc979ed042f6 /config | |
| parent | 5b9076d7535142365be6a5789a6395aa03b3bd13 (diff) | |
add config to read the last IP address in the list of proxies rather than the first (#17765)
* by default read the last IP address in the list of proxies rather than the first
* apply review feedback
* apply review feedback
* update expected screenshot
Diffstat (limited to 'config')
| -rwxr-xr-x | config/global.ini.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/config/global.ini.php b/config/global.ini.php index 0e80bed014..262ba7ddfe 100755 --- a/config/global.ini.php +++ b/config/global.ini.php @@ -641,6 +641,11 @@ multi_server_environment = 0 ; By enabling this flag the header HTTP_X_FORWARDED_URI will be considered for the current script name. proxy_uri_header = 0 +; If set to 1 we use the last IP in the list of proxy IPs when determining the client IP. Using the last IP can be more +; secure when using proxy headers in combination with a load balancer. By default the first IP is read according to RFC7239 +; which is required when the client sends the IP through a proxy header as well as the load balancer. +proxy_ip_read_last_in_list = 0 + ; Whether to enable trusted host checking. This can be disabled if you're running Matomo ; on several URLs and do not wish to constantly edit the trusted host list. enable_trusted_host_check = 1 |