system-configuration

Enforce SSRF protection, trusted proxies, and HTTP security settings.

7|1|Updated Feb 12, 2023
One-click install
npx skills add https://github.com/hirokazu-kobayashi-koba-hiro/idp-server --skill system-configuration-hirokazu-kobayashi-koba-hiro
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: system-configuration
Source: https://github.com/hirokazu-kobayashi-koba-hiro/idp-server/tree/main/.claude/skills/system-configuration
Command: npx skills add https://github.com/hirokazu-kobayashi-koba-hiro/idp-server --skill system-configuration-hirokazu-kobayashi-koba-hiro

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

System configuration provides centralized security and network controls to harden the platform, covering SSRF protection, trusted proxies, and HTTP security measures.

Core Features & Use Cases

  • SSRF protection to block server-side request forgery attempts and restrict outbound calls
  • Trusted proxies support to correctly resolve client IPs behind proxies and load balancers
  • Private IP and allowlist enforcement to prevent access to internal ranges
  • OWASP-aligned allowlist validation for safer URL allowlists
  • Use cases: DevOps and platform security teams implement consistent posture across services and environments

Quick Start

Run the system-configuration guide to enable SSRF protection, configure trusted proxies, and apply HTTP security best practices.

Frequently Asked Questions about system-configuration

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I configure SSRF protection to block server-side request forgery attempts?

SSRF protection blocks server-side request forgery attempts by restricting outbound calls and enforcing private IP block rules. This configuration centralizes network security to prevent unauthorized internal range access across multi-service deployments.

What is the best way to resolve client IPs correctly behind trusted proxies and load balancers?

Trusted proxies support correctly resolves client IPs behind proxies and load balancers. Configuring this ensures accurate request handling and proper IP resolution within multi-service deployment environments.

How does OWASP-aligned allowlist validation work for safer URL allowlists?

OWASP-aligned allowlist validation enforces safer URL allowlists by validating requests against predefined rules. This mechanism restricts access to private IP ranges and prevents unauthorized outbound calls from compromised services.

Can I apply HTTP security settings across multiple services and development workflows?

HTTP security settings can be applied across multi-service deployments and development workflows. This configuration enforces consistent security posture, including SSRF guards and proxy trust, across all platform services and environments.

Why do I need private IP block enforcement and allowlist validation in my platform security configuration?

Private IP block enforcement and allowlist validation harden platform security by preventing access to internal network ranges. This restricts outbound calls and ensures secure request handling across distributed services.

Does system configuration for IdP support centralized security controls for DevOps and platform security teams?

System configuration for IdP provides centralized security and network controls for DevOps and platform security teams. It enables consistent posture enforcement across services and environments through SSRF protection and proxy trust configuration.