harden the trusted hosts

2 years ago · 760ec301e3
parent 9d2046f43f
commit 760ec301e3
1 changed files with 1 additions and 0 deletions
--- a/webmails/roundcube/config/config.inc.php
+++ b/webmails/roundcube/config/config.inc.php
@ -15,6 +15,7 @@ $config['enable_spellcheck'] = true;
 $config['spellcheck_engine'] = 'pspell';
 $config['session_lifetime'] = {{ SESSION_TIMEOUT_MINUTES | int }};
 $config['request_path'] = '{{ WEB_WEBMAIL or "none" }}';
+$config['trusted_host_patterns'] = [ {{ HOSTNAMES.split(",") | map("tojson") | join(',') }}];

 // Mail servers
 $config['imap_host'] = '{{ FRONT_ADDRESS or "front" }}:10143';