From eac0517e631f13983b80873fe2b8e04ad59d3ad0 Mon Sep 17 00:00:00 2001
From: jwklijnsma <janwiebe@janwiebe.eu>
Date: Fri, 9 Feb 2024 18:49:31 +0100
Subject: [PATCH] add.

---
 .../internal/20220209144645_proxy_protocol.js | 36 +++++++++++++++++++
 backend/internal/nginx.js                     |  2 +-
 backend/schema/endpoints/proxy-hosts.json     | 10 ++++++
 3 files changed, 47 insertions(+), 1 deletion(-)
 create mode 100644 backend/internal/20220209144645_proxy_protocol.js

diff --git a/backend/internal/20220209144645_proxy_protocol.js b/backend/internal/20220209144645_proxy_protocol.js
new file mode 100644
index 00000000..8c809912
--- /dev/null
+++ b/backend/internal/20220209144645_proxy_protocol.js
@@ -0,0 +1,36 @@
+const migrate_name = 'proxy_protocol';
+const logger       = require('../logger').migrate;
+
+/**
+ * Migrate
+ *
+ * @see http://knexjs.org/#Schema
+ *
+ * @param   {Object}  knex
+ * @param   {Promise} Promise
+ * @returns {Promise}
+ */
+exports.up = function (knex/*, Promise*/) {
+	logger.info('[' + migrate_name + '] Migrating Up...');
+
+	return knex.schema.table('proxy_host', function (proxy_host) {
+		proxy_host.integer('enable_proxy_protocol').notNull().unsigned().defaultTo(0);
+		proxy_host.string('load_balancer_ip').notNull().defaultTo('');
+	})
+		.then(() => {
+			logger.info('[' + migrate_name + '] proxy_host Table altered');
+		});
+
+};
+
+/**
+ * Undo Migrate
+ *
+ * @param   {Object}  knex
+ * @param   {Promise} Promise
+ * @returns {Promise}
+ */
+exports.down = function (knex, Promise) {
+	logger.warn('[' + migrate_name + '] You can\'t migrate down this one.');
+	return Promise.resolve(true);
+};
\ No newline at end of file
diff --git a/backend/internal/nginx.js b/backend/internal/nginx.js
index a92d23b5..e5b62f14 100644
--- a/backend/internal/nginx.js
+++ b/backend/internal/nginx.js
@@ -154,7 +154,7 @@ const internalNginx = {
 				for (let i = 0; i < host.locations.length; i++) {
 					let locationCopy = Object.assign({}, {access_list_id: host.access_list_id}, {certificate_id: host.certificate_id},
 						{ssl_forced: host.ssl_forced}, {caching_enabled: host.caching_enabled}, {block_exploits: host.block_exploits},
-						{allow_websocket_upgrade: host.allow_websocket_upgrade}, {enable_proxy_protocol: host.enable_proxy_protocol},
+						{allow_websocket_upgrade: host.allow_websocket_upgrade}, {enable_proxy_protocol: host.enable_proxy_protocol}, {enable_proxy_protocol: host.enable_proxy_protocol},
 						{load_balancer_ip: host.load_balancer_ip}, {http2_support: host.http2_support},
 						{hsts_enabled: host.hsts_enabled}, {hsts_subdomains: host.hsts_subdomains}, {access_list: host.access_list},
 						{certificate: host.certificate}, host.locations[i]);
diff --git a/backend/schema/endpoints/proxy-hosts.json b/backend/schema/endpoints/proxy-hosts.json
index 27a8ec2a..c74f655a 100644
--- a/backend/schema/endpoints/proxy-hosts.json
+++ b/backend/schema/endpoints/proxy-hosts.json
@@ -68,6 +68,16 @@
       "minLength": 0,
       "maxLength": 255
     },
+    "enable_proxy_protocol": {
+      "description": "Enable PROXY Protocol support",
+      "example": true,
+      "type": "boolean"
+    },
+    "load_balancer_ip": {
+      "type": "string",
+      "minLength": 0,
+      "maxLength": 255
+    },
     "access_list_id": {
       "$ref": "../definitions.json#/definitions/access_list_id"
     },