# Global setting to hide origin IP from everywhere - is it possible?

**URL:** <https://meta.discourse.org/t/global-setting-to-hide-origin-ip-from-everywhere-is-it-possible/228988>\
**Category:** Product Support\
**Created:** [June 4, 2022, 1:29am UTC](https://meta.discourse.org/t/global-setting-to-hide-origin-ip-from-everywhere-is-it-possible/228988 "2022-06-04T01:29:25Z")\
**Posts on this page:** 1\
**Showing post:** 1

<div class="post-metadata">

**Author:** ![meglio](https://sea3.discourse-cdn.com/meta/user_avatar/meta.discourse.org/meglio/32/71444_2.png) [@meglio](https://meta.discourse.org/u/meglio)\
**Post date:** [June 4, 2022, 1:29am UTC](https://meta.discourse.org/t/global-setting-to-hide-origin-ip-from-everywhere-is-it-possible/228988/1 "2022-06-04T01:29:25Z")

</div>

We are using a ddos protection service from the very beginning, and their staff says it is important that out software never ever expose the origin IP in any way.

Besides turning off emails entirely, are there any settings that we put in `app.yml` that will help with this globally?

* * *

For instance, one of the things that make me confused is, at a time when Discourse will issue an SSL certificate with Let’s Encrypt, will Discourse expose the origin IP, or will it make Let’s Encrypt validate by URL, not by IP?

---

_[View the full topic](https://meta.discourse.org/t/global-setting-to-hide-origin-ip-from-everywhere-is-it-possible/228988)._