As usual, posting it and seeing responses helps me find other similar posts.
e.g.
Thanks y’all! Off to configure set_real_ip_from in the container nginx!
I’m going to do the entire RFC1918 space though. For anyone else’s reference, that would be:
after_bundle_exec:
- replace:
filename: /etc/nginx/conf.d/discourse.conf
from: "types {"
to: |
set_real_ip_from 192.168.0.0/16;
set_real_ip_from 172.16.0.0/12;
set_real_ip_from 10.0.0.0/8;
real_ip_recursive on;
real_ip_header X-Forwarded-For;
types {