docs: clarify reverse proxy authentication requirements (#39940)

Document that reverse proxy authentication requires Gitea to be
reachable only through the authenticating proxy, and which routes each
setting covers.

Docs: https://gitea.com/gitea/docs/pulls/604
Co-authored-by: silverwind <me@silverwind.io>
This commit is contained in:
bircniandsilverwind authored and GitHub committed 2026-10-22 19:35:34 +00:00
1 parent 04c65f26f1
commit c11302233b
1 file changed
+3 -2
+3 -2
View File
@@ -865,9 +865,10 @@ LEVEL = Info
;; Allow users to sign-in with a passkey
;ENABLE_PASSKEY_AUTHENTICATION = true
;;
;; More detail: https://github.com/gogits/gogs/issues/165
;; Reverse proxy authentication for the web interface, Git over HTTP, Git LFS and the package registry.
;; Gitea must only be reachable through the proxy, which must set or remove the authentication headers on every request.
;ENABLE_REVERSE_PROXY_AUTHENTICATION = false
; Enable this to allow reverse proxy authentication for API requests, the reverse proxy is responsible for ensuring that no CSRF is possible.
;; Reverse proxy authentication for the REST API under /api/v1.
;ENABLE_REVERSE_PROXY_AUTHENTICATION_API = false
;ENABLE_REVERSE_PROXY_AUTO_REGISTRATION = false
;ENABLE_REVERSE_PROXY_EMAIL = false