Hmm, that seemed right, but loooking at the “internal” nginx access logs shows the real IP’s being passed through.
