# HG changeset patch
# User Mads Kiilerich <mads@kiilerich.com>
# Date 2021-05-27 00:48:35
# Node ID d483e2df546f9af5b7e61bc8031c6109ef21d2ec
# Parent  de59ad8185e1d811345450b117ed0570889ea7ff

ini: set translate_forwarded_server = False when using paste prefix middleware

Paste Deploy PrefixMiddleware will be default trust HTTP headers that a proxy
server might have set. That can be a problem if there is no proxy server or if
the proxy just pass these headers through.

Change the configuration example to disable this translation.

diff --git a/development.ini b/development.ini
--- a/development.ini
+++ b/development.ini
@@ -81,6 +81,7 @@ max_request_body_size = 107374182400
 #[filter:proxy-prefix]
 #use = egg:PasteDeploy#prefix
 #prefix = /<your-prefix>
+#translate_forwarded_server = False
 
 [app:main]
 use = egg:kallithea
diff --git a/kallithea/templates/ini/template.ini.mako b/kallithea/templates/ini/template.ini.mako
--- a/kallithea/templates/ini/template.ini.mako
+++ b/kallithea/templates/ini/template.ini.mako
@@ -145,6 +145,7 @@ reload-on-exception = true             ;
 #[filter:proxy-prefix]
 #use = egg:PasteDeploy#prefix
 #prefix = /<your-prefix>
+#translate_forwarded_server = False
 
 [app:main]
 use = egg:kallithea