From 4c92fba2b903bdef123f1e895afcdf9a869fe565 Mon Sep 17 00:00:00 2001 From: Jake Howard Date: Sat, 12 Sep 2020 20:03:22 +0100 Subject: [PATCH] Change gitlab trusted proxies to be docker IP space Else it becomes `127.0.0.1`, which is obviously not right --- ansible/roles/gitlab/files/gitlab.rb | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/ansible/roles/gitlab/files/gitlab.rb b/ansible/roles/gitlab/files/gitlab.rb index eb75f9f..64d9d55 100644 --- a/ansible/roles/gitlab/files/gitlab.rb +++ b/ansible/roles/gitlab/files/gitlab.rb @@ -26,8 +26,8 @@ gitlab_rails['redis_port'] = 6379 gitlab_rails['gitlab_default_theme'] = 2 -nginx['real_ip_trusted_addresses'] = ['0.0.0.0/0'] -gitlab_rails['trusted_proxies'] = ['0.0.0.0/0'] +nginx['real_ip_trusted_addresses'] = ['172.80.0.0/16'] +gitlab_rails['trusted_proxies'] = ['172.80.0.0/16'] nginx['real_ip_header'] = 'X-Forwarded-For' gitlab_pages['enable'] = false