server: trusted_proxies – X-Forwarded-For für Rate-Limit hinter Reverse-Proxy

This commit is contained in:
OpenClaw Dev 2026-11-01 04:09:09 +01:00
parent 97646da970
commit 126f4be2b9
6 changed files with 101 additions and 7 deletions

View file

@ -5,6 +5,7 @@ listen: 127.0.0.1:8787 # bind to 0.0.0.0 only behind TLS (reverse proxy
auth_token: "" # optional static admin token (>= 16 chars, sees all sessions). Generate: openssl rand -hex 32
allow_registration: true # users sign up via POST /api/auth/register; set false after creating your account
token_ttl_hours: 720 # login token lifetime
trusted_proxies: [] # reverse proxy IPs/CIDRs whose X-Forwarded-For is trusted (empty = loopback only)
allowed_origins: [] # browser origins allowed besides same host; "*" only if you really mean it
data_dir: ./data
workspace: "" # default: <data_dir>/workspace; file tools cannot leave it