From 4a0ef7fa1af420ed4d118ffc2c90174146a126b1 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?dni=20=E2=9A=A1?= <office@dnilabs.com>
Date: Mon, 19 May 2025 13:47:30 +0200
Subject: [PATCH] feat: add ssl proxy settings to docker and `.env.example`
 (#3161)

---
 .env.example | 4 ++--
 Dockerfile   | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/.env.example b/.env.example
index 34a5c320..cc358596 100644
--- a/.env.example
+++ b/.env.example
@@ -167,10 +167,10 @@ KEYCLOAK_DISCOVERY_URL=""
 
 ######################################
 
-# uvicorn variable, uncomment to allow https behind a proxy
+# uvicorn variable, allow https behind a proxy
 # IMPORTANT: this also needs the webserver to be configured to forward the headers
 # http://docs.lnbits.org/guide/installation.html#running-behind-an-apache2-reverse-proxy-over-https
-# FORWARDED_ALLOW_IPS="*"
+FORWARDED_ALLOW_IPS="*"
 
 # Server security, rate limiting ips, blocked ips, allowed ips
 LNBITS_RATE_LIMIT_NO="200"
diff --git a/Dockerfile b/Dockerfile
index a407e3ff..dd182ee5 100644
--- a/Dockerfile
+++ b/Dockerfile
@@ -55,4 +55,4 @@ ENV LNBITS_HOST="0.0.0.0"
 
 EXPOSE 5000
 
-CMD ["sh", "-c", "poetry run lnbits --port $LNBITS_PORT --host $LNBITS_HOST"]
+CMD ["sh", "-c", "poetry run lnbits --port $LNBITS_PORT --host $LNBITS_HOST --forwarded-allow-ips='*'"]