From 39a742d2ff7512d4deb9967641558b848325d620 Mon Sep 17 00:00:00 2001
From: terminaldweller <devi@terminaldweller.com>
Date: Thu, 1 May 2025 22:16:45 +0000
Subject: update

---
 nginx.conf | 8 +++++---
 1 file changed, 5 insertions(+), 3 deletions(-)

(limited to 'nginx.conf')

diff --git a/nginx.conf b/nginx.conf
index b917535..b18cafc 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -6,6 +6,7 @@ http {
   include /etc/nginx/mime.types;
   server_tokens off;
   limit_req_zone $binary_remote_addr zone=one:10m rate=30r/m;
+
   server {
     listen 443 ssl;
     keepalive_timeout 60;
@@ -26,13 +27,14 @@ http {
     add_header X-XSS-Protection "1; mode=block" always;
     add_header Referrer-Policy "no-referrer";
     fastcgi_hide_header X-Powered-By;
-    proxy_set_header X-Real-IP       $proxy_protocol_addr;
-    proxy_set_header X-Forwarded-For $proxy_protocol_addr;
 
     error_page 401 403 404 /404.html;
     location / {
       proxy_pass http://icanhazallips:8080;
-      proxy_set_header X-Forwaded-For $proxy_add_x_forwarded_for;
+      proxy_set_header Host $host;
+      proxy_set_header X-Real-IP $remote_addr;
+      proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+      proxy_set_header X-Forwarded-Proto https;
     }
   }
 }
-- 
cgit v1.2.3