feat(haproxy): ship trusted-proxy source lists for header gating

2026-08-13 13:23:52 -07:00
parent 77b8cb029b
commit af9fb1d2f0
4 changed files with 51 additions and 0 deletions
@@ -21,6 +21,8 @@ set -eo pipefail
 mkdir -p /etc/haproxy
 [ -f /etc/haproxy/trusted_ips.list ] || : > /etc/haproxy/trusted_ips.list
 [ -f /etc/haproxy/trusted_ips.map ]  || : > /etc/haproxy/trusted_ips.map
+[ -f /etc/haproxy/cloudflare_ips.list ]  || : > /etc/haproxy/cloudflare_ips.list
+[ -f /etc/haproxy/trusted_proxies.list ] || : > /etc/haproxy/trusted_proxies.list

 cron &