docs: update changelog and add note about trusted domains

Signed-off-by:  Eric Callahan <arksine.code@gmail.com>
This commit is contained in:
Eric Callahan 2024-01-22 12:42:25 -05:00
parent d1f97f2658
commit f44fc4b85b
No known key found for this signature in database
GPG Key ID: 5A1EB336DFB4C71B
2 changed files with 11 additions and 2 deletions

View File

@ -46,6 +46,7 @@ The format is based on [Keep a Changelog].
- **klippy_connection**: Fixed a race condition that can result in
skipped subscription updates.
- **configheler**: Fixed inline comment parsing.
- **authorization**: Fixed blocking call to `socket.getfqdn()`
### Changed

View File

@ -469,8 +469,8 @@ trusted_clients:
# must be expressed in CIDR notation (see http://ip.sb/cidr for more info).
# For example, an entry of 192.168.1.0/24 will authorize IPs in the range of
# 192.168.1.1 - 192.168.1.254. Note that when specifying IPv4 ranges the
# last segment of the ip address must be 0. The default is no clients are
# trusted.
# last segment of the ip address must be 0. The default is no IPs or
# domains are trusted.
cors_domains:
http://klipper-printer.local
http://second-printer.local:7125
@ -498,6 +498,14 @@ default_source: moonraker
# "moonraker" The default is "moonraker".
```
!!! Tip
When configuring the `trusted_clients` option it is generally recommended
to stick with IP ranges and avoid including domain names. When attempting to
authenticate a request against a domain name Moonraker must perform a DNS
lookup. If the DNS service is not available then authentication will fail
and an error will be returned. In addition, DNS lookups will introduce delay
in the response.
### `[ldap]`
The `ldap` module may be used by `[authorization]` to perform user