jochen e1293fb0ad The route proxy tells a backend the request was HTTPS, and for which name ...

NewSingleHostReverseProxy sets only X-Forwarded-For, so a backend that writes its own addresses saw
the plain hop from the proxy: Gitea's Go import tag named an http clone URL and go get refused the
SDK's module path. The proxy now sets X-Forwarded-Proto, -Host and -For from the request it received,
and keeps the Host header as it was.

2026-10-03 22:22:51 +02:00

..

authority_test.go

route-proxy: an ACME account belongs to the authority that issued it

2026-09-10 21:02:00 +02:00

bus.go

The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only

2026-10-02 01:46:30 +02:00

challenge_test.go

route-proxy: a policy refusal is also not-my-token

2026-09-26 14:26:01 +02:00

Dockerfile

The example images build from the Go the manifest pins

2026-10-02 15:52:25 +02:00

forwarded_test.go

The route proxy tells a backend the request was HTTPS, and for which name

2026-10-03 22:22:51 +02:00

main.go

The route proxy tells a backend the request was HTTPS, and for which name

2026-10-03 22:22:51 +02:00

policy_test.go

route-proxy serves a route's internal-name alias, never certifies it

2026-09-25 17:24:13 +02:00

reach_test.go

The proxy is told its routes and the mesh on the bus, and serves internal names to the mesh only

2026-10-02 01:46:30 +02:00

routes_test.go

route-proxy: serve a route that names only its internal host

2026-10-01 23:31:57 +02:00