mirror of
https://github.com/Dokploy/templates.git
synced 2026-07-16 19:35:26 +02:00
56df572522
Zulip 12 rejects requests forwarded by an untrusted reverse proxy with a 500 "Proxy-Misconfiguration: Incorrect reverse proxy IPs set in Zulip" error page. TRUST_GATEWAY_IP=True only whitelists the container's default-route gateway IP, but Dokploy's Traefik connects from its own container IP on the (dynamically-subnetted) compose network, so it was never trusted. Replace TRUST_GATEWAY_IP with LOADBALANCER_IPS covering the RFC1918 ranges, which Zulip feeds into nginx set_real_ip_from / its trusted proxy list, so Traefik is trusted regardless of which Docker subnet it connects from. Also align meta.json version with the shipped image tag (12.1-0). Note: the zulip-server image ships a HEALTHCHECK (/health, 300s start period) and first boot runs full migrations, so Traefik only exposes the router once the container turns healthy — expect several minutes of 404 on the domain right after the first deploy. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
22 lines
530 B
TOML
22 lines
530 B
TOML
[variables]
|
|
main_domain = "${domain}"
|
|
admin_email = "${email}"
|
|
|
|
[config]
|
|
env = [
|
|
"ZULIP_EXTERNAL_HOST=${main_domain}",
|
|
"ZULIP_ADMINISTRATOR=${admin_email}",
|
|
"ZULIP_POSTGRES_PASSWORD=${password:32}",
|
|
"ZULIP_MEMCACHED_PASSWORD=${password:32}",
|
|
"ZULIP_RABBITMQ_PASSWORD=${password:32}",
|
|
"ZULIP_REDIS_PASSWORD=${password:32}",
|
|
"ZULIP_SECRET_KEY=${password:64}",
|
|
"ZULIP_LOADBALANCER_IPS=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16",
|
|
]
|
|
mounts = []
|
|
|
|
[[config.domains]]
|
|
serviceName = "zulip"
|
|
port = 80
|
|
host = "${main_domain}"
|