From 773f2339e8c45f468dfd2296b7f044ca930d26e9 Mon Sep 17 00:00:00 2001 From: nd Date: Sun, 14 Jul 2019 14:51:19 +0200 Subject: [PATCH] fixed x-forwarded-for --- templates/proxy.conf.j2 | 5 +++-- templates/vhost.conf.j2 | 10 +++++----- 2 files changed, 8 insertions(+), 7 deletions(-) diff --git a/templates/proxy.conf.j2 b/templates/proxy.conf.j2 index f688027..0103e1a 100644 --- a/templates/proxy.conf.j2 +++ b/templates/proxy.conf.j2 @@ -1,4 +1,5 @@ {% for ip in nginx.real_ip_from %} -set_real_ip_from {{ ip }}; +set_real_ip_from {{ ip }}; {% endfor %} -real_ip_header X-Forwarded-For; +real_ip_header X-Forwarded-For; +real_ip_recursive on; diff --git a/templates/vhost.conf.j2 b/templates/vhost.conf.j2 index e01c79c..e6c1a89 100644 --- a/templates/vhost.conf.j2 +++ b/templates/vhost.conf.j2 @@ -32,11 +32,11 @@ server { # add proxy headers proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; - proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; - proxy_set_header X-Forwarded-Protocol $scheme; - proxy_set_header X-Forwarded-Ssl $https; - proxy_set_header X-Url-Scheme $scheme; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto $scheme; + proxy_set_header X-Forwarded-Ssl $https; + proxy_set_header X-Url-Scheme $scheme; # Websockets proxy_http_version 1.1;