From 57701b5d6cabe42386a61792dac3004779e5d073 Mon Sep 17 00:00:00 2001 From: David Mehren Date: Sun, 26 Mar 2023 12:01:10 +0200 Subject: [PATCH] docs: add note about separate renderer domain Signed-off-by: David Mehren --- docs/content/config/index.md | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/docs/content/config/index.md b/docs/content/config/index.md index b98542e5b..bf07f9b2d 100644 --- a/docs/content/config/index.md +++ b/docs/content/config/index.md @@ -42,6 +42,10 @@ steal credentials from the rendered note content, because renderer and editor ar This increases the security of the software and greatly mitigates [XSS attacks](https://en.wikipedia.org/wiki/Cross-site_scripting). However, you can run HedgeDoc without this extra security, but we recommend using it if possible. +!!! note + When you want to use a separate domain for `HD_RENDERER_BASE_URL`, your reverse proxy config needs + to be adjusted to direct requests for this domain to the frontend. + ## Notes | environment variable | default | example | description |