taler-deployment

commit 7491fea292f6108e1bdeb62d5d6c7e1cd0237da8
parent 9db9a64b36d2aa550b93b662a605fb4987e77d5e
Author: ms <ms@taler.net>
Date:   Wed,  1 Dec 2021 17:03:05 +0100

taler-local

forward port only when X-Forward-Host
differs from the one Nginx binds to.

Diffstat:
M
bin/WIP/taler-local
 | 
3
++-

1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/bin/WIP/taler-local b/bin/WIP/taler-local
@@ -1088,10 +1088,11 @@ def prepare(x_forwarded_host, x_forwarded_proto):
     # connecting from within a container to still
     # reach services at X-Forwarded-Host.
     x_forwarded_port = x_forwarded_host.split(":")[1]
+    need_redirect = x_forwarded_port != REV_PROXY_PORT
     with open(TALER_UNIT_FILES_DIR / "taler-local-port-redirect.service", "w") as port_redirect_unit:
         port_redirect_unit.write(unit_file_content(
             description = "Port redirect allowing configuration at X-Forwarded-Host",
-            cmd = f"socat TCP4-LISTEN:{x_forwarded_port},fork TCP4:{REV_PROXY_NETLOC}",
+            cmd = f"socat TCP4-LISTEN:{x_forwarded_port},fork TCP4:{REV_PROXY_NETLOC}" if need_redirect else "true",
         ))
     with open(TALER_UNIT_FILES_DIR / "taler-local-exchange-httpd.service", "w") as exchange_unit:
         exchange_unit.write(unit_file_content(