nextcloud: add tristed_proxies, template it

Also template `trusted_domains` for consistency. Signed-off-by: Jakub Sokołowski <[email protected]>
status-im · Mar 24, 2022 · 7252003 · 7252003
1 parent 6090911
commit 7252003
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 3 deletions.
diff --git a/ansible/roles/nextcloud/defaults/main.yml b/ansible/roles/nextcloud/defaults/main.yml
@@ -5,6 +5,14 @@ nextcloud_compose_file: '{{ nextcloud_service_path }}/docker-compose.yml'
 
 # Proxy
 #nextcloud_domain: ~
+nextcloud_trusted_domains:
+  - 'localhost'
+  - '{{ nextcloud_domain }}'
+  - '{{ nextcloud_docs_domain }}'
+nextcloud_trusted_proxies:
+  - '127.0.0.1'     # localhost
+  - '10.0.0.0/8'    # VPN
+  - '172.17.0.0/16' # Docker
 # Admin
 nextcloud_admin_email: '[email protected]'
 nextcloud_admin_username: 'admin'

diff --git a/ansible/roles/nextcloud/templates/config.php.j2 b/ansible/roles/nextcloud/templates/config.php.j2
@@ -13,9 +13,8 @@ $CONFIG = [
   'overwrite.cli.url' => 'https://localhost',
   'overwritehost' => '{{ nextcloud_domain }}',
   'overwriteprotocol' => 'https',
-  'trusted_domains' => [
-    'localhost', '{{ nextcloud_domain }}', '{{ nextcloud_docs_domain }}',
-  ],
+  'trusted_domains' => {{ nextcloud_trusted_domains | to_json }},
+  'trusted_proxies' => {{ nextcloud_trusted_proxies | to_json }},
   /* LOGS */
   'log_type' => 'file',
   'logfile' => '/data/nextcloud.log',