Merge pull request #191 from nebulade/patch-1

miroslavpejic85 · Feb 2, 2025 · cd6ced5 · cd6ced5
2 parents 6da22eb + 519872d
commit cd6ced5
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/app/src/Server.js b/app/src/Server.js
@@ -138,6 +138,7 @@ const io = socketIo(server, {
 });
 
 const host = config.server.hostUrl || `http://localhost:${config.server.listen.port}`;
+const trustProxy = !!config.server.trustProxy;
 
 const jwtCfg = {
     JWT_KEY: (config.jwt && config.jwt.key) || 'mirotalksfu_jwt_secret',
@@ -357,6 +358,7 @@ function OIDCAuth(req, res, next) {
 
 function startServer() {
     // Start the app
+    app.set('trust proxy', trustProxy);
     app.use(helmet.xssFilter()); // Enable XSS protection
     app.use(helmet.noSniff()); // Enable content type sniffing prevention
     app.use(express.static(dir.public));

diff --git a/app/src/config.template.js b/app/src/config.template.js
@@ -82,6 +82,7 @@ module.exports = {
             ip: '0.0.0.0',
             port: process.env.PORT || 3010,
         },
+        trustProxy: false,
         ssl: {
             // ssl/README.md
             cert: '../ssl/cert.pem',