nginx: set real ip

2026-08-19 22:42:20 +02:00 · 2026-08-19 22:42:20 +02:00 · 935dce826d
parent 75603387c7
commit 935dce826d
1 changed files with 8 additions and 0 deletions
--- a/modules/services/nginx.nix
+++ b/modules/services/nginx.nix
@ -6,5 +6,13 @@
    recommendedOptimisation = true;

    clientMaxBodySize = "512M";
+
+    # On trust nos ip internes pour bien indiquer le client au bout
+    # i.e. on considère pas le reverseproxy comme notre client
+    appendHttpConfig = ''
+      set_real_ip_from 172.16.0.0/16;
+      set_real_ip_from fd00::/56;
+      real_ip_header X-Real-Ip;
+    '';
  };
 }