-
-
Notifications
You must be signed in to change notification settings - Fork 520
Open
Labels
Description
by default each app ip allowlist setting is 0.0.0.0/0, which works fine for most use cases. An issue arises when the app is exposed to the internet, in my case via a cloudflare tunnel (cloudflared, not the cloudflare-ddns role in this project). Incoming requests use ipv6, which result in 403 Forbidden errors as the ipallowlist middleware blocks them. Since the rule allows any ipv4, updating it from 0.0.0.0/0 to 0.0.0.0/0, ::/0 will fix the issue.
This problem seem to only affect portainer and bitwarden, as other apps don't use the ipallowlist middleware