seewe/sub2api
1
0
Fork 0
mirror of https://github.com/Wei-Shaw/sub2api.git synced 2026-10-14 12:02:27 +08:00
Code Issues Packages Projects Releases Wiki Activity

docs: 本地化客户端 IP 请求头设置

Browse Source 
Ultraworked with [Sisyphus](https://github.com/code-yeongyu/oh-my-openagent)

Co-authored-by: Sisyphus <clio-agent@sisyphuslabs.ai>
This commit is contained in:
Jlypx
2026-07-20 00:10:18 +08:00
co-authored by Sisyphus
parent 4990ca0b2c
commit 80dd2929a3
2 changed files with 16 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
frontend/src/i18n/locales/en/admin/settings.ts
+8 -1
View File
@@ -153,7 +153,14 @@ export default {
'Choose which client IP is used by API Key allowlists/denylists, admin audit logs, and session IP/UA binding',
trustForwardedIp: 'Trust forwarded client IP',
trustForwardedIpHint:
'Enabled by default for upgrade compatibility. When enabled, raw CF-Connecting-IP, X-Real-IP, or X-Forwarded-For values take over server.trusted_proxies for client-IP resolution. Disable it to enforce the Gin trusted-proxy chain configured by server.trusted_proxies. Only enable takeover mode when the origin cannot be reached directly. Changing this switch changes existing session IP fingerprints.'
'Enabled by default for upgrade compatibility. When enabled, raw CF-Connecting-IP, X-Real-IP, or X-Forwarded-For values take over server.trusted_proxies for client-IP resolution. Disable it to enforce the Gin trusted-proxy chain configured by server.trusted_proxies. Only enable takeover mode when the origin cannot be reached directly. Changing this switch changes existing session IP fingerprints.',
forwardedClientIpHeaders: 'Custom client-IP headers',
forwardedClientIpHeadersHint: 'Add CDN or proxy header names to check before the built-in headers.',
forwardedClientIpHeadersPlaceholder: 'X-Client-IP',
forwardedClientIpHeadersRiskHint: 'These raw headers can be spoofed when the origin is reachable directly. Restrict origin access before trusting them.',
forwardedClientIpHeaderInvalid: 'Enter a valid HTTP header name.',
forwardedClientIpHeadersLimit: 'At most {max} custom client-IP headers are allowed.',
removeForwardedClientIpHeader: 'Remove {header}'
},
linuxdo: {
title: 'LinuxDo Connect Login',
frontend/src/i18n/locales/zh/admin/settings.ts
+8 -1
View File
@@ -152,7 +152,14 @@ export default {
description: '控制 API Key 白/黑名单、操作审计日志与会话 IP/UA 绑定使用哪个客户端 IP 判断',
trustForwardedIp: '信任反代传递的客户端 IP',
trustForwardedIpHint:
'为保证升级兼容默认开启。开启后 CF-Connecting-IP、X-Real-IP 或 X-Forwarded-For 会直接接管客户端 IP 解析并覆盖 server.trusted_proxies；关闭后严格使用 server.trusted_proxies 配置的 Gin 可信代理链。仅在源站无法被直接访问时开启接管模式。切换会改变现有会话的 IP 指纹。'
'为保证升级兼容默认开启。开启后 CF-Connecting-IP、X-Real-IP 或 X-Forwarded-For 会直接接管客户端 IP 解析并覆盖 server.trusted_proxies；关闭后严格使用 server.trusted_proxies 配置的 Gin 可信代理链。仅在源站无法被直接访问时开启接管模式。切换会改变现有会话的 IP 指纹。',
forwardedClientIpHeaders: '自定义客户端 IP 请求头',
forwardedClientIpHeadersHint: '添加 CDN 或反代请求头名称，解析时优先于内置请求头。',
forwardedClientIpHeadersPlaceholder: 'X-Client-IP',
forwardedClientIpHeadersRiskHint: '源站可被直接访问时，这些原始请求头可被伪造；请先限制源站访问再信任它们。',
forwardedClientIpHeaderInvalid: '请输入有效的 HTTP 请求头名称。',
forwardedClientIpHeadersLimit: '自定义客户端 IP 请求头最多允许 {max} 个。',
removeForwardedClientIpHeader: '移除 {header}'
},
linuxdo: {
title: 'LinuxDo Connect 登录',