Real IP no longer recognized through proxy

pfaffman · July 16, 2026, 1:27pm

I remember something about this recently but I can’t find it either. Handling the "chain of trust" of the end user's real IP - #8 by supermathie includes a link to the cloudflare template, which I think may be a good model.

github.com/discourse/discourse_docker

templates/cloudflare.template.yml

main

run:
  - file:
      path: /etc/nginx/conf.d/outlets/server/real-ip-header.conf
      chmod: 644
      contents: |
        real_ip_header cf-connecting-ip;
  - exec:
      cmd:
        # avoid the trap of specifying both URLs on one curl line; the data might not have a final newline
        # print sprintf looks dubious at first, but avoids the problem of "how many times do you backslash a \\\\n"
        - curl -s https://www.cloudflare.com/ips-v4/ | awk '{print sprintf("set_real_ip_from %s;", $0)}' > /etc/nginx/conf.d/outlets/server/set-real-ip-from-cloudflare.conf
        - curl -s https://www.cloudflare.com/ips-v6/ | awk '{print sprintf("set_real_ip_from %s;", $0)}' >> /etc/nginx/conf.d/outlets/server/set-real-ip-from-cloudflare.conf

Here’s what I’m doing and it seems to still work (as of “Discourse 2026.6.0-latest - GitHub - discourse/discourse: A platform for community discussion. Free, open, simple. · GitHub version 5c507d8359f4d6e8a5d98780c622d51cedbd9bd7”)

after_bundle_exec:
  - replace:
    filename: /etc/nginx/conf.d/discourse.conf
    from: "types {"
    to: |
      set_real_ip_from 192.168.1.0/24;
      set_real_ip_from 192.168.11.0/24;
      set_real_ip_from 172.16.0.0/12;
      set_real_ip_from 10.0.0.0/8;
      real_ip_recursive on;
      real_ip_header X-Forwarded-For;
      types {

Topic		Replies	Views
Handling the "chain of trust" of the end user's real IP Self-Hosting docker , how-to	7	201	July 2, 2026
Commit b4a3389 更新后如何获取用户ip Self-hosting nginx , cloudflare	3	264	June 29, 2026
Last IP shows Reverse Proxy IP address Support	5	2528	May 22, 2019
All IPs recorded as 127.0.0.1 Self-hosting	4	2809	June 8, 2017
How to set set_real_ip_from for discourse Support	9	3900	November 22, 2017

Real IP no longer recognized through proxy

Related topics