www/c-icap: fix locahost ACL (#3667)

This commit is contained in:
Andy Binder
2023-11-13 10:28:32 +01:00
committed by GitHub
parent 5bcc4d5410
commit 2cfee82818
@@ -46,7 +46,8 @@ ServerName {{ system.hostname }}
{% if helpers.exists('OPNsense.proxy.forward.icap.SendUsername') and OPNsense.proxy.forward.icap.SendUsername == '1' %}
RemoteProxyUsers on
acl AUTH auth *
icap_access allow AUTH 127.0.0.1
acl localserver srvip 127.0.0.1
icap_access allow AUTH localserver
{% else %}
RemoteProxyUsers off
{% endif %}
@@ -61,7 +62,8 @@ RemoteProxyUserHeader {{OPNsense.proxy.forward.icap.UsernameHeader}}
{% else %}
RemoteProxyUsers on
acl AUTH auth *
icap_access allow AUTH 127.0.0.1
acl localserver srvip 127.0.0.1
icap_access allow AUTH localserver
RemoteProxyUserHeaderEncoded on
RemoteProxyUserHeader X-Authenticated-User
{% endif %}