cluster

commit f6629f4fd1e75927d163483520d7929a050ccf19
parent b97f0669a19779c8b60754f19bd8901b9c8cad9d
Author: MTRNord <MTRNord@users.noreply.github.com>
Date:   Fri, 17 Apr 2026 21:46:08 +0200

fix ips

Signed-off-by: MTRNord <MTRNord@users.noreply.github.com>

Diffstat:
M
apps/talos_cluster/mediawiki/configmap.yaml
 | 
4
++++

1 file changed, 4 insertions(+), 0 deletions(-)
diff --git a/apps/talos_cluster/mediawiki/configmap.yaml b/apps/talos_cluster/mediawiki/configmap.yaml
@@ -88,6 +88,10 @@ data:
 
     $wgShowExceptionDetails = true;
 
+    # Trust X-Forwarded-For from Envoy Gateway (pod CIDR and private network)
+    $wgUsePrivateIPs = true;
+    $wgTrustedProxies = ['10.0.128.0/17', '10.0.96.0/19', 'fd00:10:244::/56', 'fd00:10:96::/112'];
+
     # === Spam prevention ===
     # Disable public account creation — admins create accounts manually
     $wgGroupPermissions['*']['createaccount'] = false;