fedserv/echoIRCd
1
1
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

proxy: forward v2 TLS TLVs (PP2_TYPE_SSL/CERTFP) so plaintext clients behind a TLS-terminating proxy show secure+certfp; restore ws_trust_proxy to the config example

Browse source
This commit is contained in:
Jean Chevronnet 2026-08-11 17:13:32 +00:00
parent 4f6c0ded48
commit 6ffd6a57bc
3 changed files with 128 additions and 23 deletions
Download patch file Download diff file Expand all files Collapse all files

4
echoircd.conf.example
View file

@ -149,7 +149,9 @@ amu_target = both
# ws_origin = https://x.example # (repeatable) allowed Origin globs; empty = any
# ws_defaultmode = text # frame mode with no subprotocol: text|binary|reject
# ws_proxyranges = 127.0.0.1 # (repeatable) glob/CIDR of proxies whose
# # X-Real-IP / X-Forwarded-For we trust
# # X-Real-IP / X-Forwarded-For we trust (scoped)
# ws_trust_proxy = no # trust those headers from ANY peer (simpler but
# # allows IP spoofing; prefer ws_proxyranges)
# ws_allowmissingorigin = yes # allow clients that send no Origin header
# ws_nativeping = yes # liveness via WebSocket pings (no = IRC PING)
# ws_handshake_timeout = 10 # seconds to complete the HTTP Upgrade