Synapse workers should respect X-Forwarded headers

Currently, Synapse workers ignore the X-Forwarded headers, which leads to internal Docker IP addresses randomly appearing in the users' device list.

This adds the `x_forwarded: true` option to the worker config, fixing the issue.
This commit is contained in:
David Mehren 2022-06-18 16:13:08 +02:00
parent 38027e72f6
commit f6a73231ab
No known key found for this signature in database
GPG Key ID: 185982BA4C42B7C3

View File

@ -26,6 +26,7 @@ worker_listeners:
{% if http_resources|length > 0 %} {% if http_resources|length > 0 %}
- type: http - type: http
bind_addresses: ['::'] bind_addresses: ['::']
x_forwarded: true
port: {{ matrix_synapse_worker_details.port }} port: {{ matrix_synapse_worker_details.port }}
resources: resources:
- names: {{ http_resources|to_json }} - names: {{ http_resources|to_json }}