Trusted-ips - which header for reverse proxy?

bobbysteel · 06-26-2022, 06:08 AM

I'm using Caddy to reverse proxy. It works great except the x-forwarded-by header doesn't seem to work with trusted-ips set to my local subnet 192.168.1.0/24. Is there a different header I should pass through like x-remote-ip? I can't seem to see in github which headers are checked for this option.

kovidgoyal · 06-26-2022, 07:10 AM

headers are not used for trusted ips. The ip address of the other end of the connection is used.

bobbysteel · 06-27-2022, 02:56 AM

How can a reverse proxy be configured then?

kovidgoyal · 06-27-2022, 03:15 AM

Not sure what you are asking? trusted ips are for if you want connections from specific IP addresses to be trusted, without any form of authentication. There is no point in wrapping a connection from a trusted ip in SSL.

Since they are trusted anyway there is no need to use a proxy with them, simply connect directly.

In other words reverse proxies and trusted ips dont really go together.

What is is you are actually trying to achieve?

bobbysteel · 06-27-2022, 06:04 PM

I use caddy so I don't need to touch certificates at all. I also run a wildcard ssl setup there so calibre.mydomain.com works seamlessly w all my other apps. I'd like to use the trusted ip to avoid login hassles on home network but I guess I can do this via the proxy basic auth.

06-26-2022, 06:08 AM	#1
bobbysteel Big Poppa Posts: 110 Karma: 10 Join Date: Jul 2010 Device: Nook	Trusted-ips - which header for reverse proxy? I'm using Caddy to reverse proxy. It works great except the x-forwarded-by header doesn't seem to work with trusted-ips set to my local subnet 192.168.1.0/24. Is there a different header I should pass through like x-remote-ip? I can't seem to see in github which headers are checked for this option.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Need help: Using NGINX as reverse-proxy for Calibre	haertig	Related Tools	5	11-18-2017 08:54 PM
Calibre-server reverse proxy issues	dom134	Related Tools	12	05-30-2016 04:39 PM
Aldiko + Calibre-Server + Reverse Proxy	dummkauf	Related Tools	4	02-02-2016 02:55 PM
need help with reverse proxy server	novaris	Devices	1	09-10-2012 12:22 PM
Content Server with Apache Reverse Proxy	Caleb666	Calibre	1	08-29-2011 04:20 PM

06-26-2022, 07:10 AM	#2
kovidgoyal creator of calibre Posts: 43,985 Karma: 22669822 Join Date: Oct 2006 Location: Mumbai, India Device: Various	headers are not used for trusted ips. The ip address of the other end of the connection is used.

06-27-2022, 02:56 AM	#3
bobbysteel Big Poppa Posts: 110 Karma: 10 Join Date: Jul 2010 Device: Nook	How can a reverse proxy be configured then?

06-27-2022, 03:15 AM	#4
kovidgoyal creator of calibre Posts: 43,985 Karma: 22669822 Join Date: Oct 2006 Location: Mumbai, India Device: Various	Not sure what you are asking? trusted ips are for if you want connections from specific IP addresses to be trusted, without any form of authentication. There is no point in wrapping a connection from a trusted ip in SSL. Since they are trusted anyway there is no need to use a proxy with them, simply connect directly. In other words reverse proxies and trusted ips dont really go together. What is is you are actually trying to achieve?

06-27-2022, 06:04 PM	#5
bobbysteel Big Poppa Posts: 110 Karma: 10 Join Date: Jul 2010 Device: Nook	I use caddy so I don't need to touch certificates at all. I also run a wildcard ssl setup there so calibre.mydomain.com works seamlessly w all my other apps. I'd like to use the trusted ip to avoid login hassles on home network but I guess I can do this via the proxy basic auth.