If sockets are being used trust the real_ip header sent form connections to it by...

diff --git a/templates/web.socketed.template.yml b/templates/web.socketed.template.yml
index b8c615ff77feffdf3a1462cd51ff2f9710b8e10e..75808b941dc6ef8bed02615a17bb3aac030ca651 100644 (file)
--- a/templates/web.socketed.template.yml
+++ b/templates/web.socketed.template.yml
@@ -16,8 +16,10 @@ run:
      from: /listen 80;/
      to: |
        listen unix:/shared/nginx.http.sock;
+       set_real_ip_from unix:;
   - replace:
      filename: "/etc/nginx/conf.d/discourse.conf"
      from: /listen 443 ssl spdy;/
      to: |
        listen unix:/shared/nginx.https.sock ssl spdy;
+       set_real_ip_from unix:;