From 639d16207a34e89efd9fa05a5af153e37c3e836f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Andr=C3=A1s=20Mar=C3=B3y?= <andras@maroy.hu>
Date: Sat, 28 Mar 2020 17:40:50 +0100
Subject: [PATCH] Expose reverse proxy related configuration as environment
 variables
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: András Maróy <andras@maroy.hu>
---
 .config/reverse-proxy.config.php              | 20 +++++++++++++++++++
 16.0/apache/config/reverse-proxy.config.php   | 20 +++++++++++++++++++
 .../config/reverse-proxy.config.php           | 20 +++++++++++++++++++
 16.0/fpm/config/reverse-proxy.config.php      | 20 +++++++++++++++++++
 17.0/apache/config/reverse-proxy.config.php   | 20 +++++++++++++++++++
 .../config/reverse-proxy.config.php           | 20 +++++++++++++++++++
 17.0/fpm/config/reverse-proxy.config.php      | 20 +++++++++++++++++++
 18.0/apache/config/reverse-proxy.config.php   | 20 +++++++++++++++++++
 .../config/reverse-proxy.config.php           | 20 +++++++++++++++++++
 18.0/fpm/config/reverse-proxy.config.php      | 20 +++++++++++++++++++
 README.md                                     | 10 ++++++++++
 11 files changed, 210 insertions(+)
 create mode 100644 .config/reverse-proxy.config.php
 create mode 100644 16.0/apache/config/reverse-proxy.config.php
 create mode 100644 16.0/fpm-alpine/config/reverse-proxy.config.php
 create mode 100644 16.0/fpm/config/reverse-proxy.config.php
 create mode 100644 17.0/apache/config/reverse-proxy.config.php
 create mode 100644 17.0/fpm-alpine/config/reverse-proxy.config.php
 create mode 100644 17.0/fpm/config/reverse-proxy.config.php
 create mode 100644 18.0/apache/config/reverse-proxy.config.php
 create mode 100644 18.0/fpm-alpine/config/reverse-proxy.config.php
 create mode 100644 18.0/fpm/config/reverse-proxy.config.php

diff --git a/.config/reverse-proxy.config.php b/.config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/.config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/16.0/apache/config/reverse-proxy.config.php b/16.0/apache/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/16.0/apache/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/16.0/fpm-alpine/config/reverse-proxy.config.php b/16.0/fpm-alpine/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/16.0/fpm-alpine/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/16.0/fpm/config/reverse-proxy.config.php b/16.0/fpm/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/16.0/fpm/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/17.0/apache/config/reverse-proxy.config.php b/17.0/apache/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/17.0/apache/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/17.0/fpm-alpine/config/reverse-proxy.config.php b/17.0/fpm-alpine/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/17.0/fpm-alpine/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/17.0/fpm/config/reverse-proxy.config.php b/17.0/fpm/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/17.0/fpm/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/18.0/apache/config/reverse-proxy.config.php b/18.0/apache/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/18.0/apache/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/18.0/fpm-alpine/config/reverse-proxy.config.php b/18.0/fpm-alpine/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/18.0/fpm-alpine/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/18.0/fpm/config/reverse-proxy.config.php b/18.0/fpm/config/reverse-proxy.config.php
new file mode 100644
index 00000000..ab77c82d
--- /dev/null
+++ b/18.0/fpm/config/reverse-proxy.config.php
@@ -0,0 +1,20 @@
+<?php
+if (getenv('OVERWRITEHOST')) {
+  $CONFIG['overwritehost'] = getenv('OVERWRITEHOST');
+}
+
+if (getenv('OVERWRITEPROTOCOL')) {
+  $CONFIG['overwriteprotocol'] = getenv('OVERWRITEPROTOCOL');
+}
+
+if (getenv('OVERWRITEWEBROOT')) {
+  $CONFIG['overwritewebroot'] = getenv('OVERWRITEWEBROOT');
+}
+
+if (getenv('OVERWRITECONDADDR')) {
+  $CONFIG['overwritecondaddr'] = getenv('OVERWRITECONDADDR');
+}
+
+if (getenv('TRUSTED_PROXIES')) {
+  $CONFIG['trusted_proxies'] = explode(',', getenv('TRUSTED_PROXIES'));
+}
diff --git a/README.md b/README.md
index 8721eb66..4bbef3d4 100644
--- a/README.md
+++ b/README.md
@@ -158,6 +158,16 @@ To use an external SMTP server, you have to provide the connection details. To c
 
 Check the [Nextcloud documentation](https://docs.nextcloud.com/server/15/admin_manual/configuration_server/email_configuration.html) for other values to configure SMTP.
 
+To use Nextcloud behind a reverse proxy you can use the following environment variables:
+
+- `OVERWRITEHOST` (not set by default): Set the hostname of the proxy. Can also specify a port.
+- `OVERWRITEPROTOCOL` (not set by default): Set the protocol of the proxy, http or https.
+- `OVERWRITEWEBROOT` (not set by default): Set the absolute path of the proxy.
+- `OVERWRITECONDADDR` (not set by default): Regex to overwrite the values dependent on the remote address.
+- `TRUSTED_PROXIES` (not set by default): A comma separated list of IPv4 addresses, IPv4 ranges in CIDR notation or IPv6 addresses of proxies Nextcloud should trust.
+
+Check the [Nexcloud documentation](https://docs.nextcloud.com/server/18/admin_manual/configuration_server/reverse_proxy_configuration.html) for more details.
+
 # Running this image with docker-compose
 The easiest way to get a fully featured and functional setup is using a `docker-compose` file. There are too many different possibilities to setup your system, so here are only some examples of what you have to look for.