mirror of
https://github.com/freedombox/FreedomBox.git
synced 2026-01-21 07:55:00 +00:00
dc9ab52edc
- Use the X-Forwarded-For header only if specified in the configuration. This makes FreedomBox safe to use when not behind a reverse proxy server (although we are unlikely to do this). - When fetching the IP address to reset after successful login, use the X-Forwarded-For header only if specified in the configuration. - Minor flake8 refactorings. Signed-off-by: Sunil Mohan Adapa <sunil@medhas.org> Reviewed-by: James Valleroy <jvalleroy@mailbox.org>
46 lines
1.4 KiB
Plaintext
46 lines
1.4 KiB
Plaintext
[Path]
|
|
# directory locations
|
|
file_root = %(root)s
|
|
config_dir = %(file_root)s/data/etc/plinth
|
|
data_dir = %(file_root)s/data/var/lib/plinth
|
|
server_dir = /plinth
|
|
actions_dir = %(file_root)s/actions
|
|
doc_dir = %(file_root)s/doc
|
|
custom_static_dir = %(file_root)s/data/var/www/plinth/custom/static
|
|
|
|
# file locations
|
|
store_file = %(data_dir)s/plinth.sqlite3
|
|
|
|
[Network]
|
|
host = 127.0.0.1
|
|
port = 8000
|
|
|
|
# Enable the following only if Plinth is behind a proxy server. The
|
|
# proxy server should properly clean and the following HTTP headers:
|
|
# X-Forwarded-For
|
|
# X-Forwarded-Host
|
|
# X-Forwarded-Proto
|
|
# If you enable these unnecessarily, this will lead to serious security
|
|
# problems. For more information, see
|
|
# https://docs.djangoproject.com/en/1.7/ref/settings/
|
|
#
|
|
# These are enabled by default in Plinth because the default
|
|
# configuration allows only connections from localhost
|
|
#
|
|
# Leave the values blank to disable
|
|
use_x_forwarded_for = True
|
|
use_x_forwarded_host = True
|
|
secure_proxy_ssl_header = HTTP_X_FORWARDED_PROTO
|
|
|
|
[Misc]
|
|
box_name = FreedomBox
|
|
# The danube_edition changes the firstboot process and offers entering a
|
|
# voucher for a freedombox.me sub-domain. This functionality requires
|
|
# additional debian packages to be installed:
|
|
#
|
|
# pagekite, python3-requests
|
|
#
|
|
# They are not added as dependencies to keep the normal installation images
|
|
# lean, but make sure to add them if you want to build danube-edition images.
|
|
danube_edition = False
|