Trust real IP from any private network address (e.g. haproxy running …

…on another container).
ixc · Nov 14, 2018 · e625329 · e625329
1 parent 9f601e6
commit e625329
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/ixc_django_docker/etc/nginx.tmpl.conf b/ixc_django_docker/etc/nginx.tmpl.conf
@@ -35,6 +35,9 @@ http {
             real_ip_header    X-Forwarded-For;
             real_ip_recursive on;
             set_real_ip_from  127.0.0.1;
+            set_real_ip_from  10.0.0.0/8;
+            set_real_ip_from  172.16.0.0/12;
+            set_real_ip_from  192.168.0.0/16;
 
             # Support websockets.
             proxy_http_version 1.1;