extant2000/flamenet-relay
1
0
Fork 0
Code Issues 14 Pull Requests Actions Packages Projects Releases Wiki Activity

Bridge inventory; trust X-Forwarded-For only from FN_TRUSTED_PROXY_ADDRS #248

Merged
paulhitt merged 5 commits from bridge/inventory into main 2026-10-09 21:22:12 +00:00
Conversation 1 Commits 5 Files Changed 15
+1113 -34
paulhitt commented 2026-10-09 20:48:43 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

Adds the obfs4_bridges table and an admin-only CLI (no route reads it). The relay now believes X-Forwarded-For only when the TCP peer is in FN_TRUSTED_PROXY_ADDRS; unset trusts nobody. Docs fixed: FN_TRUSTED_PROXIES defaults to 1.

Before deploying: Traefik is pinned at 172.18.255.241 (done 2026-10-09); FN_TRUSTED_PROXY_ADDRS=172.18.255.241 must be set on the relay and relay1/2/3, or every client shares Traefik's rate-limit bucket.

🤖 Generated with Claude Code

Adds the obfs4_bridges table and an admin-only CLI (no route reads it). The relay now believes X-Forwarded-For only when the TCP peer is in FN_TRUSTED_PROXY_ADDRS; unset trusts nobody. Docs fixed: FN_TRUSTED_PROXIES defaults to 1. Before deploying: Traefik is pinned at 172.18.255.241 (done 2026-10-09); FN_TRUSTED_PROXY_ADDRS=172.18.255.241 must be set on the relay and relay1/2/3, or every client shares Traefik's rate-limit bucket. 🤖 Generated with [Claude Code](https://claude.com/claude-code)
paulhitt (Migrated from gitlab.com) scheduled this pull request to auto merge when all checks succeed 2026-10-09 20:48:52 +00:00
paulhitt commented 2026-10-09 21:22:12 +00:00 (Migrated from gitlab.com)
Copy Link
Copy Source

mentioned in commit f11e32d0a9

mentioned in commit f11e32d0a93783cd9d3f2900bee7349e5ee889d2
paulhitt (Migrated from gitlab.com) merged commit f11e32d0a9 into main 2026-10-09 21:22:12 +00:00
Sign in to join this conversation.
Reviewers
No Reviewers
Labels
Clear labels
accuracy
A public page claims something the code does not do
 architecture
blocked:apple
Waiting on App Store review
 bug
ci
deploy
docs
federation
hardening
idea
investigation
ops
Deploy, CI, infrastructure
 parity
One platform has it and the other does not
 planning
privacy
Changes what is stored, or what we say is stored
 reliability
scalability
security
self-hosting
signup
stability
tech-debt
tooling
unwired
Built in the engine, not reachable from the UI
 verification
No labels
Milestone
No items
No Milestone
Projects
Clear projects
No projects
Assignees
Clear assignees
extant2000git
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: extant2000/flamenet-relay#248