From 81c17556cf764f1f4746d36a5d2493f77b1d77d2 Mon Sep 17 00:00:00 2001 From: Mooash Date: Thu, 15 Oct 2015 22:30:53 +1100 Subject: [PATCH] If sockets are being used trust the real_ip header sent form connections to it by default --- templates/web.socketed.template.yml | 2 ++ 1 file changed, 2 insertions(+) diff --git a/templates/web.socketed.template.yml b/templates/web.socketed.template.yml index b8c615f..75808b9 100644 --- a/templates/web.socketed.template.yml +++ b/templates/web.socketed.template.yml @@ -16,8 +16,10 @@ run: from: /listen 80;/ to: | listen unix:/shared/nginx.http.sock; + set_real_ip_from unix:; - replace: filename: "/etc/nginx/conf.d/discourse.conf" from: /listen 443 ssl spdy;/ to: | listen unix:/shared/nginx.https.sock ssl spdy; + set_real_ip_from unix:; -- 2.25.1