Merge pull request GitbookIO#33 from exponentjs/trust-proxy

Introduce a "TRUST_PROXY" env var that sets Express's "trust proxy" setting
msholly · Mar 19, 2016 · 88c99e0 · 88c99e0
2 parents 8c1f9c7 + 8ff7ba3
commit 88c99e0
Show file tree

Hide file tree

Showing 2 changed files with 9 additions and 0 deletions.
diff --git a/bin/web.js b/bin/web.js
@@ -77,6 +77,10 @@ myNuts.after('download', function(download, next) {
     next();
 });
 
+if (process.env.TRUST_PROXY) {
+  app.set('trust proxy', process.env.TRUST_PROXY);
+}
+
 app.use(myNuts.router);
 
 // Error handling

diff --git a/docs/deploy.md b/docs/deploy.md
@@ -41,6 +41,11 @@ $ export GITHUB_REPO=Username/MyApp
 # Authentication for the private API
 $ export API_USERNAME=hello
 $ export API_PASSWORD=world
+
+# Express's "trust proxy" setting for trusting X-Forwarded-* headers when
+# behind a reverse proxy like nginx
+# http://expressjs.com/en/guide/behind-proxies.html
+$ export TRUST_PROXY=loopback
 ```
 
 Then start the application using: