Trusted reverse proxy warning [solved]

osscombat · July 16, 2019, 8:06pm

Nexcloud v.16.0.3.
Is it possible to get rid of the yellow “wrong reverse proxy headers or you’re connected through the trusted proxy” message on the Overview page?
The server is behind traefik trusted reverse proxy, traefik is on a dedicated VM, Nextcloud (Apache) is on another VM. I followed the setup on the link recommended, but I still see this warning. Is it a normal behavior, or the proxy headers are really incorrect still?

Update: That was my misconfiguration, trusted_proxies array was within another array value, and was ignored.

KarlF12 · July 17, 2019, 1:05am

It’s not normal behavior. I use an Apache reverse proxy and don’t have such an error. I can’t say about traefik however.

Reiner_Nippes · July 17, 2019, 7:34am

is that the traefik container ip address or the host ip address?

you have to use the container address: docker_container.NetworkSettings.Networks.backend.IPAddress

github.com

ReinerNippes/nextcloud_on_docker/blob/master/roles/nextcloud_config/defaults/main.yml#L8


      
          ---
          # defaults file for prep_nextcloud
          
          nextccloud_system_config:
            - "overwrite.cli.url --value=https://{{ nextcloud_server_fqdn }}"
            - "trusted_domains 0 --value={{ nextcloud_server_fqdn }}"
            - "trusted_domains 1 --value=nginx"
            - "trusted_proxies 0 --value={{ traefik_facts.container.NetworkSettings.Networks.backend.IPAddress }}"
            - "redis host --value='redis'"
            - "redis port --value='6379' --type=integer"
            - "redis timeout --value='0' --type=integer"
            - "redis password --value={{ lookup('password', '{{ nextcloud_credential_store }}/redis_secret chars=ascii_letters,digits length=32') }}"
            - "memcache.local --value='\\OC\\Memcache\\Redis'"
            - "memcache.locking --value='\\OC\\Memcache\\Redis'"
            - "filelocking.enabled --value=true --type=boolean"
            - "enable_previews --value=true --type=boolean"
            - "enabledPreviewProviders 0 --value='OC\\Preview\\PNG'"
            - "enabledPreviewProviders 1 --value='OC\\Preview\\JPEG'"