From 8aa243f872655da374a8f106a75e727cb860ec2b Mon Sep 17 00:00:00 2001
From: raneq <46573858+raneq@users.noreply.github.com>
Date: Fri, 30 Aug 2019 14:39:21 +0200
Subject: [PATCH] Default to proxied env. (#69)

* Default to proxied env.

This means only listen to addresses at loopback if, and enable the odoo flag to enable proxied mode (modifies certain http headers)
---
 defaults/main.yml      | 4 ++--
 templates/odoo.conf.j2 | 4 ++--
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index 9b4b93a..7168ba4 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -56,5 +56,5 @@ odoo_daemon: "odoo.service"
 odoo_role_demo_data: false
 
 # HTTP server settings
-odoo_role_odoo_http_interface: "0.0.0.0"
-odoo_role_odoo_proxy_mode: false
+odoo_role_odoo_http_interface: "127.0.0.1"
+odoo_role_odoo_proxy_mode: true
diff --git a/templates/odoo.conf.j2 b/templates/odoo.conf.j2
index ca7ec9a..f67d323 100644
--- a/templates/odoo.conf.j2
+++ b/templates/odoo.conf.j2
@@ -10,8 +10,8 @@ addons_path = {{ odoo_role_odoo_path }}/addons,{{ odoo_role_odoo_modules_path }}
 admin_passwd = {{ odoo_role_odoo_db_admin_password }}
 
 ; HTTP server settings
-http_interface = {{ odoo_role_odoo_http_interface | default('0.0.0.0') }}
-proxy_mode = {{ odoo_role_odoo_proxy_mode | default(false) }}
+http_interface = {{ odoo_role_odoo_http_interface }}
+proxy_mode = {{ odoo_role_odoo_proxy_mode }}
 
 {% if ( odoo_role_odoo_dbs | count ) > 1 and odoo_role_dbfilter_enabled %}
 ; Before login, use only the database that matches full domain of Host header