From f109c933c1d84a29475b0439b2601fce3f5fcc99 Mon Sep 17 00:00:00 2001
From: boris <boris+gitea@ntbx.io>
Date: Fri, 28 Nov 2025 08:47:17 +0000
Subject: [PATCH] add trusted proxies configuration

---
 .DS_Store                      | Bin 10244 -> 10244 bytes
 config/packages/framework.yaml |   2 ++
 docker-compose.yml             |   3 +--
 var/.DS_Store                  | Bin 8196 -> 8196 bytes
 4 files changed, 3 insertions(+), 2 deletions(-)

diff --git a/.DS_Store b/.DS_Store
index 13d7095c7d431fb5f6033febbdad7dd6f915a16f..0de310f3db66800d69da966e8fef9cde866cc098 100644
GIT binary patch
delta 1249
zcmaizOK1~O6o$_{I*B#dB;sTqX&ONg7se`z3lR*|LM&)&i_~t~yl6C&CQhwgrqC?x
zCO!^Ux`-O;N`kZmab;1crpxLsg+f4d<yu6Lcqii|Giizg184Yu&iT%N@8pJa!w;_=
z83zCgzzHx5X;78v)1%S!dU(}Vw%J*GR+DWIfGEs?YPO^@MA4pp^0qlr>4AZWl8z9?
zUJUM}6G|o6$rbyr%MEHKp%EG5oPZ9enDqu~q#;Ydrr{RcH4n6p43@U^fhN5*s*`S+
zk?@n&z!|+E4q-hNgW-@j+ioxeys3{?KTb3@wlqnlTM+wsEFjvU=-D=wgakQ*NCPF?
z%)_y<*J6fwynOb1p%uTWkr`)yR|lXj2xLj<u|2`q;@1fbkqy-h@~gI@e$qiKj#eg}
z9TouFdoqCBHY$JzMXCJKx!OgKEn|rHa?Iq3uicZF<b6i@fcH}ixW*6B=S2KNEW6D4
zGX(|vJU&4$|D92cT>K~`$v!HM$cHiEQLyAWkhGq9=rbA3lC?GSta-H`mu}8&8aJ+~
zw-)Q9Th@XXxb0b@@62P}Be>12$4^Z}Un#gQNcdcEaLv!-GzGXL3~_}bq2jRQ6u7CU
zz4UzrL!!?pQ=*@$VP4EIbY%f4iRT7S)>bwZ?3Dzgyda4*+mAP-JVSYR(IpF5m%6!`
zs_V(3f<5vvyIxj;_(9@(EZo#KPRSQp=Jwbk7G<8Bf1OL^6?`WPNA<E1Fa!4>Z2ga!
zFB$wPhpy1yE??F7i6ag(jcir(`ft}<xo3K^ZJt)Tx(AoMeN^yKc%y9d|7OcoH^ck|
DUP472

delta 742
zcmZn(XbG6$FX+O+z`)4BAi$85ZWx@LpIfl8a2or>2Eonj94s7+E|cd7NX7}jn+#ON
z!l1{H&XCDalAG`1l9ZF51Qg>aOADB|GwQe_s(cDw`GO3HO+Y;i3=SJMuNFGO%4BkJ
za-oEbmW#&9_N@@}*cg%-@)`0N(tviR=jJ2Kgs7RkT|$9z!Q>kf-YOzNK!eyAQh>^n
z8L}Bt8H$jdILjPl<YaeAIW{OWTT+41VRDaT!Q>LDRwiM&$@8TogpjqY>OEPzH)?XA
zwA5sKX&yE>SDlH$U~-kTw+dql*v0~eQiddk9H0Y}k+m=I0o(XeT8<6M<dsoiRG6$M
zQ^3rScz5zb88Nn5?-d{HjGDYxMgqpXEhEXq@L}>dnLcI)@2!(J%1TV0FU!Ri@#fI?
zeNmIw%c^idn8zI_C(4TPql6;Egh_I?ER4Ghawj{=iLtf4+YIt@tek`*gb9uyW`;6`
zM1~?{jZFLklc&jfdNH%UuLk?53>bQO;E+TK!<V-gUD*qZ78EszXo0AitSK+g)IMQj
VVJ!1zc7<Oon>EGV7zZqN4FL0A<DUQk

diff --git a/config/packages/framework.yaml b/config/packages/framework.yaml
index 7e1ee1f..21ac91d 100644
--- a/config/packages/framework.yaml
+++ b/config/packages/framework.yaml
@@ -1,6 +1,8 @@
 # see https://symfony.com/doc/current/reference/configuration/framework.html
 framework:
     secret: '%env(APP_SECRET)%'
+    trusted_proxies: '%env(TRUSTED_PROXIES)%'
+    trusted_headers: ['x-forwarded-for','x-forwarded-proto','x-forwarded-port','x-forwarded-host','x-forwarded-prefix']
 
     # Note that the session will be started ONLY if you read or write from it.
     session: true
diff --git a/docker-compose.yml b/docker-compose.yml
index de3ff24..2cbb482 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -1,7 +1,6 @@
 services:
   tonehaus:
-#    image: tonehaus/tonehaus:dev-arm64
-    image: git.ntbx.io/boris/tonehaus:latest
+    image: git.ntbx.io/boris/tonehaus:latest-arm64
     container_name: tonehaus
     restart: unless-stopped
     volumes:
diff --git a/var/.DS_Store b/var/.DS_Store
index 051dc897b16ddefc9fb9bf1b9b3403751f49859c..da1c4543369c7d5e7c67d7563de0f067bf0afce7 100644
GIT binary patch
delta 298
zcmZp1XmOa}&&a<qU^hP_|70EkDHbM&$ySrK1f<v`o0?;aawdBT$iSF60y6SUlLZ)n
zfQ2E2A(5ekAu%W2FgQ6sw*Vx_Afd3iTfmMjAUEH|B`GIA2`I$DGL2PoP0n#gARDeJ
zH$Mfhd_e}1p^6L)llO}0u`miYx=wyC7R1abXE3qQdo#PlH<ry0MP4w{!#WQD#>`5<

delta 108
zcmZp1XmOa}&&a(oU^hP__hcRcDHg^R>(5Ts5|CoMHnYieSJY%L0T~!GM?i*|@!f{a
r%LVM%COe8Nu`mcWESQ`w9>mO`kT9|E@Md<2Z!DW7Mb9u|kv#warJy5u