Discourse reports user ips as the load balancer

[mpalmer (Matt Palmer)]

@nhumrich

set_real_ip_from 0.0.0.0/0;

Oh sweet jeebers, don’t do that. It’ll allow anyone who can manage to get a HTTP connection into your servers to spoof their IP address, which will only lead to trouble. Set it to the IP range of your VPC, instead.