vLab-BZH/bunkerwebpoc
2
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Option reverse proxy en frontal : IP réelle des clients (poc_trusted_proxies), exemple Traefik

Browse Source 
Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
This commit is contained in:
cedricandClaude Opus 5.5 committed 2026-10-27 15:36:03 +01:00
1 parent 0e5426b7c3
commit 17d9ff4b29
3 files changed
+33
Download Patch File Download Diff File Expand all files Collapse all files

No files matched your search

inventory/group_vars/bunkerweb.yml
+5
View File
@@ -28,6 +28,11 @@ bw_global_settings:
LETS_ENCRYPT_CHALLENGE: "http"
USE_LETS_ENCRYPT_STAGING: "{{ 'yes' if poc_letsencrypt_staging | bool else 'no' }}"
AUTO_REDIRECT_HTTP_TO_HTTPS: "yes"
# IP réelle du client derrière un reverse proxy (poc_trusted_proxies)
USE_REAL_IP: "{{ 'yes' if poc_trusted_proxies | length > 0 else 'no' }}"
REAL_IP_FROM: "{{ poc_trusted_proxies | join(' ') if poc_trusted_proxies | length > 0 else '192.168.0.0/16 172.16.0.0/12 10.0.0.0/8' }}"
REAL_IP_HEADER: "X-Forwarded-For"
REAL_IP_RECURSIVE: "yes"
# WAF : ModSecurity + OWASP CRS v4 actifs partout (défaut BunkerWeb)
USE_MODSECURITY: "yes"
USE_MODSECURITY_CRS: "yes"