diff options
| author | ms <ms@taler.net> | 2021-12-01 17:03:05 +0100 |
|---|---|---|
| committer | ms <ms@taler.net> | 2021-12-01 17:03:05 +0100 |
| commit | 7491fea292f6108e1bdeb62d5d6c7e1cd0237da8 (patch) | |
| tree | 460511ebe05a4fcbb0a30242efcd48702b0ca0c5 | |
| parent | 9db9a64b36d2aa550b93b662a605fb4987e77d5e (diff) | |
| download | deployment-7491fea292f6108e1bdeb62d5d6c7e1cd0237da8.tar.gz deployment-7491fea292f6108e1bdeb62d5d6c7e1cd0237da8.tar.bz2 deployment-7491fea292f6108e1bdeb62d5d6c7e1cd0237da8.zip | |
taler-local
forward port only when X-Forward-Host
differs from the one Nginx binds to.
| -rwxr-xr-x | bin/WIP/taler-local | 3 |
1 files changed, 2 insertions, 1 deletions
diff --git a/bin/WIP/taler-local b/bin/WIP/taler-local index 123cc8d..9dbd2db 100755 --- a/bin/WIP/taler-local +++ b/bin/WIP/taler-local @@ -1088,10 +1088,11 @@ def prepare(x_forwarded_host, x_forwarded_proto): # connecting from within a container to still # reach services at X-Forwarded-Host. x_forwarded_port = x_forwarded_host.split(":")[1] + need_redirect = x_forwarded_port != REV_PROXY_PORT with open(TALER_UNIT_FILES_DIR / "taler-local-port-redirect.service", "w") as port_redirect_unit: port_redirect_unit.write(unit_file_content( description = "Port redirect allowing configuration at X-Forwarded-Host", - cmd = f"socat TCP4-LISTEN:{x_forwarded_port},fork TCP4:{REV_PROXY_NETLOC}", + cmd = f"socat TCP4-LISTEN:{x_forwarded_port},fork TCP4:{REV_PROXY_NETLOC}" if need_redirect else "true", )) with open(TALER_UNIT_FILES_DIR / "taler-local-exchange-httpd.service", "w") as exchange_unit: exchange_unit.write(unit_file_content( |