Additional nginx config for real ip determination

Author: jc21

rootfs/etc/nginx/conf.d/default.conf

@@ -1,6 +1,3 @@
-# Generated IP Ranges for safe real IP determination
-include conf.d/include/ip_ranges.conf;
-
 # Healthcheck Host which proxies to the Manager,
 # thus the healthcheck ensures both services are running
 server {

rootfs/etc/nginx/nginx.conf

@@ -59,6 +59,15 @@ http {
     default http;
   }
 
+  # Real IP Determination
+  # Docker subnet:
+  set_real_ip_from 172.0.0.0/8;
+  # NPM generated CDN ip ranges:
+  include conf.d/include/ip_ranges.conf;
+  # always put the following 2 lines after ip subnets:
+  real_ip_header X-Forwarded-For;
+  real_ip_recursive on;
+
   # Files generated by NPM
   include /etc/nginx/conf.d/*.conf;
   include /data/nginx/proxy_host/*.conf;