From a2a98c8bdb0cb8507986de18c2162699e6273432 Mon Sep 17 00:00:00 2001
From: Alexandre <44178713+alexbelgium@users.noreply.github.com>
Date: Fri, 5 Dec 2025 16:07:14 +0100
Subject: [PATCH] Adjust forwarded allow IPs option visibility

---
 mealie/CHANGELOG.md   | 6 ++++++
 mealie/README.md      | 2 ++
 mealie/config.yaml    | 3 ++-
 mealie/rootfs/run.txt | 5 +++++
 4 files changed, 15 insertions(+), 1 deletion(-)

diff --git a/mealie/CHANGELOG.md b/mealie/CHANGELOG.md
index eaaba7220..8091354ed 100644
--- a/mealie/CHANGELOG.md
+++ b/mealie/CHANGELOG.md
@@ -1,6 +1,12 @@
 - The Home Assistant project has deprecated support for the armv7, armhf and i386 architectures. Support wil be fully dropped in the upcoming Home Assistant 2025.12 release
 
 
+## v3.5.2 (06-12-2025)
+- Document `FORWARDED_ALLOW_IPS` as an advanced option without exposing it in the default options tab
+
+## v3.5.1 (06-12-2025)
+- Allow configuring Gunicorn's `--forwarded-allow-ips` value to support OIDC behind reverse proxies
+
 ## v3.5.0 (15-11-2025)
 - Update to latest version from mealie-recipes/mealie (changelog : https://github.com/mealie-recipes/mealie/releases)
 - Added support for configuring extra environment variables via the `env_vars` add-on option alongside config.yaml. See https://github.com/alexbelgium/hassio-addons/wiki/Add-Environment-variables-to-your-Addon-2 for details.
diff --git a/mealie/README.md b/mealie/README.md
index 1cf1a728c..9a1618344 100644
--- a/mealie/README.md
+++ b/mealie/README.md
@@ -58,6 +58,8 @@ Configurations can be done through the app webUI, except for the following optio
 | `DATA_DIR` | str | `/config` | Data directory path |
 | `ALLOW_SIGNUP` | bool | `true` | Allow new user signup |
 
+To configure Gunicorn's `--forwarded-allow-ips` setting for trusted reverse proxies, manually add a `FORWARDED_ALLOW_IPS` entry to your add-on configuration (comma-separated IPs). It is optional and hidden from the default options tab.
+
 ### Example Configuration
 
 ```yaml
diff --git a/mealie/config.yaml b/mealie/config.yaml
index 2559b4337..bf26857e3 100644
--- a/mealie/config.yaml
+++ b/mealie/config.yaml
@@ -103,6 +103,7 @@ schema:
     - name: match(^[A-Za-z0-9_]+$)
       value: str?
   ALLOW_SIGNUP: bool
+  FORWARDED_ALLOW_IPS: str?
   BASE_URL: str?
   DATA_DIR: str?
   PGID: int
@@ -113,4 +114,4 @@ schema:
 slug: mealie
 udev: true
 url: https://github.com/alexbelgium/hassio-addons
-version: "v3.5.0"
+version: "v3.5.2"
diff --git a/mealie/rootfs/run.txt b/mealie/rootfs/run.txt
index c23f5e150..3774acfa4 100644
--- a/mealie/rootfs/run.txt
+++ b/mealie/rootfs/run.txt
@@ -63,6 +63,11 @@ cd "$DATA_DIR" || true
 chown -R "$(bashio::config "PUID"):$(bashio::config "PGID")" .
 echo "Permissions adapted"
 
+if bashio::config.has_value "FORWARDED_ALLOW_IPS"; then
+    export FORWARDED_ALLOW_IPS="$(bashio::config "FORWARDED_ALLOW_IPS")"
+    bashio::log.info "Configured FORWARDED_ALLOW_IPS for Gunicorn"
+fi
+
 bashio::log.info "Starting nginx"
 nginx & true