Source: moin Severity: wishlist Hi,
I operate a moinmoin wiki behind a pound reverse proxy. Even though pound sets the X-Forwarded-For header, moin will only display the IP of the server running pound which quickly triggers the surge protection. According to: https://moinmo.in/MarcelHäfner/Work#MoinMoin_1.9.x_behind_a_nginx_.28reverse_proxy.29 and http://www.seattlecentral.edu/dmartin/moin/MoinMoinNotes the right solution is to edit moin.wsgi and edit it so that it reads (in my case): application = make_application(shared=True, trusted_proxies=['10.0.0.1']) Unfortunately, the Debian package ships moin.wsgi under /usr/share/moin/server/moin.wsgi and thus my changes will be overridden the next time I upgrade the moin package. Please make it such that I can set the list of trusted proxies in /etc. Thanks! cheers, josch
