Skip to content

Commit cc0ba08

Browse files
committed
Change WSGI_PROXIES to PROXYFIX_CONFIG in documentation
1 parent 552c2c5 commit cc0ba08

1 file changed

Lines changed: 4 additions & 2 deletions

File tree

docs/operate/customize/configuration.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -68,14 +68,16 @@ TRUSTED_HOSTS = ['www.example.org']
6868

6969
Failing to properly configure this variable will cause the error `Bad Request Host x.x.x.x is not trusted.` when starting the web app.
7070

71-
### ``WSGI_PROXIES``
71+
### ``PROXYFIX_CONFIG``
7272

7373
Invenio is commonly used with both a load balancer and a web server in front of the application server. The load balancer and web server both work as proxies, which means that the clients remote address usually gets added in the X-Forwarded-For HTTP header. Invenio will automatically extract the clients IP address from the HTTP header, however to prevent clients from doing IP spoofing you need to specify exactly how many proxies you have in front of you application server:
7474

7575
```
76-
WSGI_PROXIES = 2
76+
PROXYFIX_CONFIG={'x_for': 1, 'x_proto': 1}
7777
```
7878

79+
You can find out more about the configuration options in [invenio-base](https://github.com/inveniosoftware/invenio-base/blob/f868e5e91cef7a6d4c7edfdb76669443484da331/invenio_base/wsgi.py#L62)
80+
7981
### Secret keys
8082

8183
Probably the most important security measure is to have strong random secret keys set for your InvenioRDM instance.

0 commit comments

Comments
 (0)