hide basic-auth headers for backends

ansibleguy · Sep 2, 2024 · 3593d77 · 3593d77
1 parent 8246e66
commit 3593d77
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/templates/etc/haproxy/conf.d/backend.cfg.j2 b/templates/etc/haproxy/conf.d/backend.cfg.j2
@@ -35,6 +35,10 @@ backend {{ name }}
 {%     include "inc/security.j2" %}
 {%     if cnf.basic_auth.plaintext | bool and cnf.basic_auth.users | length > 0 %}
     http-request auth unless { http_auth(basic_auth_{{ name }}) }
+    http-request del-header X-User
+    http-request del-header X-Auth
+    http-request del-header X-Auth-Type
+    http-request del-header Authorization
 {%     endif %}
 {%   endif %}
 {%   if cnf.mode == 'tcp' %}