fix(security): 私有上游 - 支持精确主机白名单

2026-07-22 21:25:41 +08:00
parent 277aba44bb
commit ef65839c9d
8 changed files with 52 additions and 3 deletions
--- a/docker-compose.deploy.yml
+++ b/docker-compose.deploy.yml
@@ -41,6 +41,7 @@ services:
      REDIS_URL: redis://redis:6379/0
      CANVAS_REGISTRATION_ENABLED: ${CANVAS_REGISTRATION_ENABLED:-false}
      CANVAS_ALLOW_PRIVATE_UPSTREAMS: ${CANVAS_ALLOW_PRIVATE_UPSTREAMS:-false}
+      CANVAS_ALLOWED_PRIVATE_UPSTREAM_HOSTS: ${CANVAS_ALLOWED_PRIVATE_UPSTREAM_HOSTS:-}
      CANVAS_CORS_ORIGINS: ${CANVAS_CORS_ORIGINS:-}
      GIN_MODE: release
    volumes: