Fix routes

sfu-dhil · Dec 8, 2023 · 327cd9a · 327cd9a
1 parent ce6611b
commit 327cd9a
Show file tree

Hide file tree

Showing 2 changed files with 4 additions and 0 deletions.
diff --git a/.env b/.env
@@ -39,6 +39,7 @@ GEONAMES_USERNAME=
 ROUTE_PROTOCOL=http
 ROUTE_HOST=localhost
 ROUTE_BASE=
+TRUSTED_PROXIES=127.0.0.1
 
 # Elasticsearch
 ELASTICSEARCH_HOST=elasticsearch

diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
@@ -3,6 +3,9 @@ framework:
     csrf_protection: true
     http_method_override: true
 
+    trusted_proxies: '%env(TRUSTED_PROXIES)%'
+    trusted_headers: ['x-forwarded-for', 'x-forwarded-host', 'x-forwarded-proto', 'x-forwarded-port', 'x-forwarded-prefix']
+
     # Enables session support. Note that the session will ONLY be started if you read or write from it.
     # Remove or comment this section to explicitly disable session support.
     session: