From fc8903c04ed81d36a3c11bd32d5940ec311149d2 Mon Sep 17 00:00:00 2001
From: Fritiof Hedman <gitea@fritiofhedman.se>
Date: Sun, 7 Jun 2026 20:18:33 +0200
Subject: [PATCH] Add support for forwarding headers options

---
 .../Configuration/ForwardedHeadersOptions.cs     | 16 ++++++++++++++++
 1 file changed, 16 insertions(+)
 create mode 100644 src/FrameProcessor/Configuration/ForwardedHeadersOptions.cs

diff --git a/src/FrameProcessor/Configuration/ForwardedHeadersOptions.cs b/src/FrameProcessor/Configuration/ForwardedHeadersOptions.cs
new file mode 100644
index 0000000..8496860
--- /dev/null
+++ b/src/FrameProcessor/Configuration/ForwardedHeadersOptions.cs
@@ -0,0 +1,16 @@
+namespace FrameProcessor.Configuration;
+
+/// <summary>
+/// Bound from the <c>ForwardedHeaders</c> section of <c>appsettings.json</c>.
+/// Controls which upstream proxies are trusted to set <c>X-Forwarded-*</c> headers.
+/// Empty lists trust any upstream — only safe when the listening port is not
+/// publicly reachable (e.g. Docker network).
+/// </summary>
+public sealed class ForwardedHeadersOptions
+{
+    public const string SectionName = "ForwardedHeaders";
+
+    public List<string> KnownNetworks { get; set; } = new();
+
+    public List<string> KnownProxies { get; set; } = new();
+}