diff options
| -rw-r--r-- | main.go | 4 | ||||
| -rw-r--r-- | nginx.conf | 8 |
2 files changed, 7 insertions, 5 deletions
@@ -43,8 +43,8 @@ func getIP(request *http.Request) (string, error) { log.Println(request.RemoteAddr) - if len(splitIps) > 1 { - netIP := net.ParseIP(splitIps[len(splitIps)-2]) + if len(splitIps) > 0 { + netIP := net.ParseIP(splitIps[len(splitIps)-1]) log.Println("one:", netIP.String()) if netIP != nil { return netIP.String(), nil @@ -6,6 +6,7 @@ http { include /etc/nginx/mime.types; server_tokens off; limit_req_zone $binary_remote_addr zone=one:10m rate=30r/m; + server { listen 443 ssl; keepalive_timeout 60; @@ -26,13 +27,14 @@ http { add_header X-XSS-Protection "1; mode=block" always; add_header Referrer-Policy "no-referrer"; fastcgi_hide_header X-Powered-By; - proxy_set_header X-Real-IP $proxy_protocol_addr; - proxy_set_header X-Forwarded-For $proxy_protocol_addr; error_page 401 403 404 /404.html; location / { proxy_pass http://icanhazallips:8080; - proxy_set_header X-Forwaded-For $proxy_add_x_forwarded_for; + proxy_set_header Host $host; + proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; + proxy_set_header X-Forwarded-Proto https; } } } |