From 190cb33f8e27d63d38679f05fffdee7cdec345fb Mon Sep 17 00:00:00 2001 From: Marc 'risson' Schmitt Date: Tue, 17 Dec 2024 12:21:04 +0100 Subject: [PATCH] website/docs: reverse proxies: add backlink to trusted_proxy_cidrs config (#12364) --- website/docs/install-config/reverse-proxy.md | 2 ++ 1 file changed, 2 insertions(+) diff --git a/website/docs/install-config/reverse-proxy.md b/website/docs/install-config/reverse-proxy.md index f7acdc0d68..0fdbb0ec37 100644 --- a/website/docs/install-config/reverse-proxy.md +++ b/website/docs/install-config/reverse-proxy.md @@ -15,6 +15,8 @@ If you want to access authentik behind a reverse proxy, there are a few headers It is also recommended to use a [modern TLS configuration](https://ssl-config.mozilla.org/) and disable SSL/TLS protocols older than TLS 1.3. +If your reverse proxy isn't accessing authentik from a private IP address, [trusted proxy CIDRs configuration](./configuration/configuration.mdx#listen-settings) needs to be set on the authentik server to allow client IP address detection. + The following nginx configuration can be used as a starting point for your own configuration. ```