fix: update forwarded headers configuration to include known networks: aspnet/Announcements#517

Author: ChaosEngine

DotnetPlayground.Web/Startup.cs

@@ -382,11 +382,15 @@ private void UseProxyForwardingAndDomainPathHelper(IApplicationBuilder app)
 				return next();
 			});*/
 #else
-			//Apache/nginx proxy schould pass "X-Forwarded-Proto"
-			app.UseForwardedHeaders(new ForwardedHeadersOptions
-			{
-				ForwardedHeaders = /*ForwardedHeaders.XForwardedHost | */ForwardedHeaders.XForwardedProto
-			});
+            //Apache/nginx proxy schould pass "X-Forwarded-Proto"
+            app.UseForwardedHeaders(new ForwardedHeadersOptions
+            {
+                ForwardedHeaders = /*ForwardedHeaders.XForwardedHost | */ForwardedHeaders.XForwardedProto,
+                KnownNetworks = { new Microsoft.AspNetCore.HttpOverrides.IPNetwork(
+                    IPAddress.Parse(Configuration["Proxy:KnownNetworks:YOUR_NETWORK_IP"]),
+                    int.Parse(Configuration["Proxy:KnownNetworks:YOUR_NETWORK_PREFIX_LENGTH"])
+                ) }
+            });
 #endif
         }
 

docker.example.env

@@ -34,3 +34,6 @@ Authentication__GitHub__CallbackPath=/signin-github
 
 #ASPNETCORE_URLS=http://unix:/sockets/www.sock
 #COMPlus_TieredCompilation=1
+
+Proxy__KnownNetworks__YOUR_NETWORK_IP=::ffff:172.17.0.0
+Proxy__KnownNetworks__YOUR_NETWORK_PREFIX_LENGTH=16