diff --git a/docker-compose.yml b/docker-compose.yml index b0d36bc..3b14d91 100644 --- a/docker-compose.yml +++ b/docker-compose.yml @@ -13,9 +13,10 @@ services: - POSTGRES_USER=nextcloud - "POSTGRES_PASSWORD=${POSTGRES_PASSWORD}" - "POSTGRES_HOST=10.128.0.95:5432" - - "NEXTCLOUD_URL=nextcloud.auro.re" - - "NEXTCLOUD_TRUSTED_DOMAINS=nextcloud.auro.re" - - "OVERWRITEHOST=nextcloud.auro.re" + - "NEXTCLOUD_URL=cloud.auro.re" + - "NEXTCLOUD_TRUSTED_DOMAINS=cloud.auro.re nextcloud.auro.re" + - "TRUSTED_PROXIES=45.66.111.206 2a09:6840:215::1:1 127.0.0.0/8 ::1/128" + - "OVERWRITEHOST=cloud.auro.re" - "NEXTCLOUD_ADMIN_USER=${NEXTCLOUD_ADMIN_USER}" - "NEXTCLOUD_ADMIN_PASSWORD=${NEXTCLOUD_ADMIN_PASSWORD}" @@ -25,7 +26,7 @@ services: volumes: - ./nextcloud/html:/var/www/html:ro environment: - - NGINX_HOST=nextcloud.auro.re + - NGINX_HOST=cloud.auro.re - NGINX_PORT=80 ports: - "8080:80" diff --git a/web/nginx.conf b/web/nginx.conf index e212c3c..bb8ea84 100644 --- a/web/nginx.conf +++ b/web/nginx.conf @@ -24,10 +24,15 @@ http { keepalive_timeout 65; + set_real_ip_from 45.66.111.0/24; set_real_ip_from 10.0.0.0/8; set_real_ip_from 172.16.0.0/12; set_real_ip_from 192.168.0.0/16; - real_ip_header X-Real-IP; + #real_ip_header X-Real-IP; + real_ip_header X-Forwarded-For; + #real_ip_recursive on; + + #proxy_set_header X-Forwarded-For "$remote_addr"; #gzip on; @@ -139,7 +144,7 @@ http { # Adding the cache control header for js, css and map files # Make sure it is BELOW the PHP block - location ~ \.(?:css|js|woff2?|svg|gif|map)$ { + location ~ \.(?:css|js|woff2?|svg|gif|map|mjs)$ { try_files $uri /index.php$request_uri; add_header Cache-Control "public, max-age=15778463"; # Add headers to serve security related headers (It is intended to