diff options
Diffstat (limited to 'searx/limiter.toml')
| -rw-r--r-- | searx/limiter.toml | 21 |
1 files changed, 15 insertions, 6 deletions
diff --git a/searx/limiter.toml b/searx/limiter.toml index b64a7bf28..0b40bf81f 100644 --- a/searx/limiter.toml +++ b/searx/limiter.toml @@ -1,8 +1,4 @@ -[real_ip] - -# Number of values to trust for X-Forwarded-For. - -x_for = 1 +[botdetection] # The prefix defines the number of leading bits in an address that are compared # to determine whether or not an address is part of a (client) network. @@ -10,6 +6,19 @@ x_for = 1 ipv4_prefix = 32 ipv6_prefix = 48 +# If the request IP is in trusted_proxies list, the client IP address is +# extracted from the X-Forwarded-For and X-Real-IP headers. This should be +# used if SearXNG is behind a reverse proxy or load balancer. + +trusted_proxies = [ + '127.0.0.0/8', + '::1', + # '192.168.0.0/16', + # '172.16.0.0/12', + # '10.0.0.0/8', + # 'fd00::/8', +] + [botdetection.ip_limit] # To get unlimited access in a local network, by default link-local addresses @@ -37,4 +46,4 @@ pass_ip = [ # Activate passlist of (hardcoded) IPs from the SearXNG organization, # e.g. `check.searx.space`. -pass_searxng_org = true
\ No newline at end of file +pass_searxng_org = true |