fix(bugs): properly reveal ip downstream (#407)

* fix(bugs): include fastly params for real ip * fix(bugs): marshal client ips from haproxy to nginx properly * chore: dont need that * chore: dont need that either i think * chore: dont need that either i think
python · Jul 26, 2024 · 27a2335 · 27a2335
1 parent 80869d1
commit 27a2335
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/salt/bugs/config/nginx.conf.jinja b/salt/bugs/config/nginx.conf.jinja
@@ -83,6 +83,9 @@ server {
   server_name {{ server_name }};
   include mime.types;
 
+  set_real_ip_from {{ pillar["psf_internal_network"] }};
+  real_ip_header X-Client-IP;
+
   ssl_certificate /etc/ssl/private/bugs.psf.io.pem;
   ssl_certificate_key /etc/ssl/private/bugs.psf.io.pem;