From a4643a685cb4acb81a5655ef3a5c8b9bbc588c0c Mon Sep 17 00:00:00 2001 From: villepeh <100730729+villepeh@users.noreply.github.com> Date: Mon, 28 Mar 2022 13:48:18 +0300 Subject: [PATCH] HAProxy guide update (#12279) HAproxy reverse proxy guide update to stop sending IPv4-mapped address to HS. --- changelog.d/12279.doc | 1 + docs/reverse_proxy.md | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) create mode 100644 changelog.d/12279.doc diff --git a/changelog.d/12279.doc b/changelog.d/12279.doc new file mode 100644 index 000000000..ca07104c9 --- /dev/null +++ b/changelog.d/12279.doc @@ -0,0 +1 @@ +HAProxy reverse proxy guide update to stop sending IPv4-mapped address to homeserver. Contributed by @villepeh. diff --git a/docs/reverse_proxy.md b/docs/reverse_proxy.md index 1a89da50f..5a0c84795 100644 --- a/docs/reverse_proxy.md +++ b/docs/reverse_proxy.md @@ -182,7 +182,7 @@ matrix.example.com { ``` frontend https - bind :::443 v4v6 ssl crt /etc/ssl/haproxy/ strict-sni alpn h2,http/1.1 + bind *:443,[::]:443 ssl crt /etc/ssl/haproxy/ strict-sni alpn h2,http/1.1 http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto http if !{ ssl_fc } http-request set-header X-Forwarded-For %[src] @@ -195,7 +195,7 @@ frontend https use_backend matrix if matrix-host matrix-path frontend matrix-federation - bind :::8448 v4v6 ssl crt /etc/ssl/haproxy/synapse.pem alpn h2,http/1.1 + bind *:8448,[::]:8448 ssl crt /etc/ssl/haproxy/synapse.pem alpn h2,http/1.1 http-request set-header X-Forwarded-Proto https if { ssl_fc } http-request set-header X-Forwarded-Proto http if !{ ssl_fc } http-request set-header X-Forwarded-For %[src]