feat(config): warn about LOG_REDACTION=max and PROXIED=false

favonia · Jul 6, 2024 · 9aa2cc8 · 9aa2cc8
1 parent 39a7a62
commit 9aa2cc8
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/internal/config/config_read.go b/internal/config/config_read.go
@@ -127,8 +127,16 @@ func (c *Config) NormalizeConfig(ppfmt pp.PP) bool {
 	if !ok {
 		return false
 	}
+	allProxied := true
 	for dom := range activeDomainSet {
-		proxiedMap[dom] = proxiedPred(dom)
+		proxied := proxiedPred(dom)
+		allProxied = allProxied && proxied
+		proxiedMap[dom] = proxied
+	}
+	// Warn about LOG_REDACTION=ip and PROXIED=false
+	if ppfmt.ShouldRedact(pp.PrivateDataTypeIPs) && !allProxied {
+		ppfmt.Warningf(pp.EmojiUserWarning,
+			"Some domains are not proxied by Cloudflare; their DNS records can leak IP addresses")
 	}
 
 	// Part 3: override the old values