tony/homelab
1
0
Fork 0
Code Issues 12 Pull Requests Actions Packages Projects Releases Wiki Activity

chore: Remove cloudflare-ip-header middleware

Browse Source
This commit is contained in:
Tony Du 2025-03-16 13:58:20 -07:00
parent b21a8b833b
commit 1359936c7e
Signed by: tony
SSH Key Fingerprint: SHA256:mhFElod7vS6ugYoXNATYTUGD3tYvW5yvXbXjP2uWXVw
3 changed files with 6 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
flake.nix
View File

@ -17,6 +17,7 @@
packages = with pkgs; [ packages = with pkgs; [
python311 python311
opentofu opentofu
linode-cli
kubectl kubectl
k9s k9s
] ++ ] ++

5
k8s/infrastructure/controllers/traefik/middlewares/cloudflare-ip-header.yaml
View File

@ -1,3 +1,4 @@
---
apiVersion: traefik.io/v1alpha1 apiVersion: traefik.io/v1alpha1
kind: Middleware kind: Middleware
metadata: metadata:
@ -6,5 +7,7 @@ metadata:
spec: spec:
headers: headers:
customRequestHeaders: customRequestHeaders:
# This doesn't work
# TODO: Possibly use a plugin to rewrite this header? Or confirm whether
# cloudflare sends XFF header
X-Forwarded-For: "{Cf-Connecting-Ip}" X-Forwarded-For: "{Cf-Connecting-Ip}"

2
k8s/infrastructure/controllers/traefik/release.yaml
View File

@ -60,7 +60,7 @@ spec:
websecure: websecure:
middlewares: middlewares:
- traefik-bouncer@kubernetescrd - traefik-bouncer@kubernetescrd
- traefik-cloudflare-ip-header@kubernetescrd # - traefik-cloudflare-ip-header@kubernetescrd
trustedIPs: trustedIPs:
# https://www.cloudflare.com/ips-v4/# # https://www.cloudflare.com/ips-v4/#
- 173.245.48.0/20 - 173.245.48.0/20