Add reverse proxy configuration support for remote IP address

[lafriks]

By default trust single reverse proxy from loopback IP addresses (127.0.0.0/8, ::1/128)

In containerized environments by default trust requests from all IP addresses

EDIT: It is breaking change for users that use more then single reverse proxy to serve Gitea content

[wULLSnpAXbWZGYDYyhWTKKspEQoaYxXyhoisqHf]

how exactly is this supposed to work?
how would I set a trusted thing if Gitea listens for proxied traffic on a unix socket (I actually do that)?

[lafriks]

I think for socket remote address should be 127.0.0.1

[wULLSnpAXbWZGYDYyhWTKKspEQoaYxXyhoisqHf]

I think for socket remote address should be 127.0.0.1

so they're considered as being one and the same here?

[lafriks]

I think yes, but that should probably needs to be tested

[wULLSnpAXbWZGYDYyhWTKKspEQoaYxXyhoisqHf]

I think yes, but that should probably needs to be tested

would this be sort of activated by default if I build a new version?
because then tests for this could be nice prior to merge :D
if it doesn't do anything unless I have it in the config that's better but it'd still be great to have the behaviour tested and understood.

[lafriks]

I think yes, but that should probably needs to be tested

would this be sort of activated by default if I build a new version?
because then tests for this could be nice prior to merge :D
if it doesn't do anything unless I have it in the config that's better but it'd still be great to have the behaviour tested and understood.

yes, it will be activated by default otherwise it will be insecure. By default it will trust single proxy server from localhost.
Fixed library to correctly handle unix socket address that was @ now it will be treated as 127.0.0.1:0 so trusted by default.

[techknowlogick]

@lafriks can I have access to your fork so I can "update branch" as needed?

[lafriks]

@techknowlogick done

[lafriks]

🚀