From b794b7e11d02676b2d9d0e61c004662a0a0059af Mon Sep 17 00:00:00 2001 From: rohow Date: Wed, 11 Mar 2026 19:08:23 +0800 Subject: [PATCH] feat(helm): update proxy settings to use forwarded-for-header and allow all CIDR ranges --- apps/infra/net/nginx/helmchart.yaml | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/apps/infra/net/nginx/helmchart.yaml b/apps/infra/net/nginx/helmchart.yaml index 57429e2..96e43ad 100644 --- a/apps/infra/net/nginx/helmchart.yaml +++ b/apps/infra/net/nginx/helmchart.yaml @@ -43,7 +43,8 @@ spec: config: use-forwarded-headers: "true" enable-real-ip: "true" - proxy-real-ip-cidr: "10.0.0.0/8,100.64.0.0/10" + forwarded-for-header: "X-Dev-Cm-Real-IP" + proxy-real-ip-cidr: "0.0.0.0/0" allow-snippet-annotations: "true" annotations-risk-level: Critical # 启用http2