瀏覽代碼

Configure and enable mod_remoteip, and handle X-Forwarded-Proto header.

M. Hamzah Khan 6 年之前
父節點
當前提交
2b6d282e94
共有 1 個文件被更改,包括 9 次插入1 次删除
  1. 9 1
      contrib/docker/Dockerfile.apache

+ 9 - 1
contrib/docker/Dockerfile.apache

@@ -17,7 +17,15 @@ RUN apt-get update \
  && docker-php-ext-install pdo_mysql pcntl gd exif bcmath \
  && pecl install imagick \
  && docker-php-ext-enable imagick pcntl imagick gd exif \
- && a2enmod rewrite \
+ && a2enmod rewrite remoteip \
+ && {\
+     echo RemoteIPHeader X-Real-IP ;\
+     echo RemoteIPTrustedProxy 10.0.0.0/8 ;\
+     echo RemoteIPTrustedProxy 172.16.0.0/12 ;\
+     echo RemoteIPTrustedProxy 192.168.0.0/16 ;\
+     echo SetEnvIf X-Forwarded-Proto "https" HTTPS=on ;\
+    } > /etc/apache2/conf-available/remoteip.conf \
+ && a2enconf remoteip \
  && curl -LsS https://getcomposer.org/download/${COMPOSER_VERSION}/composer.phar -o /usr/bin/composer \
  && echo "${COMPOSER_CHECKSUM}  /usr/bin/composer" | sha256sum -c - \
  && chmod 755 /usr/bin/composer \