8x48/homepage
1
0
Fork 0
mirror of https://github.com/gethomepage/homepage.git synced 2026-01-17 15:42:09 +08:00
Code Issues Actions 3 Packages Projects Releases Wiki Activity

Clarify security recommendations in documentation
Some checks failed
Crowdin Action / Crowdin Sync (push) Has been cancelled
Details
Docker CI / Linting Checks (push) Has been cancelled
Details
Docker CI / Docker Build & Push (push) Has been cancelled
Details
Repository Maintenance / Stale (push) Has been cancelled
Details
Repository Maintenance / Lock Old Threads (push) Has been cancelled
Details
Repository Maintenance / Close Answered Discussions (push) Has been cancelled
Details
Repository Maintenance / Close Outdated Discussions (push) Has been cancelled
Details
Repository Maintenance / Close Unsupported Feature Requests (push) Has been cancelled
Details

Browse Source
This commit is contained in:
shamoon
2026-01-14 19:04:28 -08:00
parent a2697bfec0
commit f9d920a8fb
2 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
docs/installation/index.md
View File

@@ -37,4 +37,4 @@ The value is a comma-separated (no spaces) list of allowed hosts (sometimes with
If you are seeing errors about host validation, check the homepage logs and ensure that the host exactly as output in the logs is in the `HOMEPAGE_ALLOWED_HOSTS` list.
This can be disabled by setting `HOMEPAGE_ALLOWED_HOSTS` to `*` but this is not recommended.
This can be disabled by setting `HOMEPAGE_ALLOWED_HOSTS` to `*` but this is not recommended. Public deployments must rely on a reverse proxy (and/or VPN) that enforces authentication, TLS, and unexpected Host headers; the built-in host check is a best-effort guard for local setups and is not a substitute for edge protections.