mirror of
https://github.com/zhaojh329/rttys.git
synced 2026-02-27 09:53:21 +08:00
c90e14a1ac
preserve client IP visibility Previously, TLS termination was moved to nginx for better separation of concerns. However, this introduced an issue with the new device IP display feature: - With nginx reverse proxying, all device connections appear to originate from 127.0.0.1 - The actual device IP addresses were masked by the proxy layer - This prevented accurate IP-based device identification and reporting Signed-off-by: Jianhui Zhao <zhaojh329@gmail.com>
46 lines
1.5 KiB
Plaintext
46 lines
1.5 KiB
Plaintext
# Device listen address and port (e.g., :5912 for all interfaces, 127.0.0.1:5912 for localhost only)
|
|
#addr-dev: :5912
|
|
|
|
# User listen address and port (e.g., :5913 for all interfaces, 127.0.0.1:5913 for localhost only)
|
|
#addr-user: :5913
|
|
|
|
# HTTP proxy address and port (automatically select an available port by default)
|
|
#addr-http-proxy:
|
|
|
|
# HTTP proxy redirect URL
|
|
#http-proxy-redir-url:
|
|
|
|
# Domain used for setting cookies
|
|
#http-proxy-redir-domain:
|
|
|
|
# Authentication token for device connections
|
|
#token: a1d4cdb1a3cd6a0e94aa3599afcddcf5
|
|
|
|
# Device hook URL - called when a device connects (if configured)
|
|
# Request method: POST
|
|
# Parameters in JSON format: {"group": "group ID", "id": "device ID", "token": "device TOKEN"}
|
|
# Return HTTP 200 to allow the device to connect
|
|
#dev-hook-url: http://127.0.0.1:8080/rttys-dev-hook
|
|
|
|
# User hook URL - called when users access /connect/:devid, /cmd/:devid, /web/, or /web2/ APIs (if configured)
|
|
# Rttys will pass all original headers, along with additional specific headers:
|
|
# X-Rttys-Hook: true
|
|
# X-Original-Method: original request method
|
|
# X-Original-URL: original request URL
|
|
# Return HTTP 200 to allow the user to access the API endpoint
|
|
#user-hook-url: http://127.0.0.1:8080/rttys-user-hook
|
|
|
|
# Local access authentication (disable authentication for local requests)
|
|
#local-auth: false
|
|
|
|
# Web management password
|
|
#password: rttys
|
|
|
|
# CORS support (allow all origins for cross-domain requests)
|
|
#allow-origins: false
|
|
|
|
# SSL/TLS for listen device
|
|
#sslcert:
|
|
#sslkey:
|
|
#cacert:
|