feat(copyparty): trust reverse proxy headers #54

Merged
alexion merged 1 commits from impl/copyparty-reverse-proxy-trust into main 2026-08-22 14:17:15 -04:00
Owner

Summary

  • add Copyparty service options for reverse-proxy forwarded-header trust
  • pass Copyparty guest trusted sources into the interior service
  • configure Pikachu Copyparty to trust the reverse-proxy guest address
  • add checks for rendered trust config, disabled default config, and empty trusted-source rejection

Checks

  • nix build .#checks.x86_64-linux.copyparty-reverse-proxy-trust-config .#checks.x86_64-linux.copyparty-reverse-proxy-trust-requires-source .#checks.x86_64-linux.pikachu --print-build-logs
  • nix flake check --print-build-logs

Review

  • risk, standards, intent, evidence, and documentation review run locally
  • one non-blocking standards finding about duplicated address literals was fixed before push
## Summary - add Copyparty service options for reverse-proxy forwarded-header trust - pass Copyparty guest trusted sources into the interior service - configure Pikachu Copyparty to trust the reverse-proxy guest address - add checks for rendered trust config, disabled default config, and empty trusted-source rejection ## Checks - nix build .#checks.x86_64-linux.copyparty-reverse-proxy-trust-config .#checks.x86_64-linux.copyparty-reverse-proxy-trust-requires-source .#checks.x86_64-linux.pikachu --print-build-logs - nix flake check --print-build-logs ## Review - risk, standards, intent, evidence, and documentation review run locally - one non-blocking standards finding about duplicated address literals was fixed before push
alexion added 1 commit 2026-08-22 14:05:51 -04:00
alexion force-pushed impl/copyparty-reverse-proxy-trust from bf17caab59 to 2c6d586cf5 2026-08-22 14:05:51 -04:00 Compare
alexion merged commit 2c6d586cf5 into main 2026-08-22 14:17:15 -04:00
alexion deleted branch impl/copyparty-reverse-proxy-trust 2026-08-22 14:17:15 -04:00
This repo is archived. You cannot comment on pull requests.
No Reviewers
No Label
1 Participants
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: alexion/dotfiles#54