From 27a2335a715de65c90277a36b1fb79fa06f03af7 Mon Sep 17 00:00:00 2001
From: Jacob Coffee <jacob@z7x.org>
Date: Fri, 26 Jul 2024 06:43:46 -0500
Subject: [PATCH] fix(bugs): properly reveal ip downstream (#407)

* fix(bugs): include fastly params for real ip

* fix(bugs): marshal client ips from haproxy to nginx properly

* chore: dont need that

* chore: dont need that either i think

* chore: dont need that either i think
---
 salt/bugs/config/nginx.conf.jinja | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/salt/bugs/config/nginx.conf.jinja b/salt/bugs/config/nginx.conf.jinja
index d2122326..a80a2053 100644
--- a/salt/bugs/config/nginx.conf.jinja
+++ b/salt/bugs/config/nginx.conf.jinja
@@ -83,6 +83,9 @@ server {
   server_name {{ server_name }};
   include mime.types;
 
+  set_real_ip_from {{ pillar["psf_internal_network"] }};
+  real_ip_header X-Client-IP;
+
   ssl_certificate /etc/ssl/private/bugs.psf.io.pem;
   ssl_certificate_key /etc/ssl/private/bugs.psf.io.pem;