From 0e3c975cb5ec3cd76942dd695edc80b82965d81a Mon Sep 17 00:00:00 2001
From: Rodrigo Arias Mallo <rodrigo.arias@bsc.es>
Date: Fri, 20 Sep 2024 15:24:38 +0200
Subject: [PATCH] Log the client IP not the proxy
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Reviewed-by: Aleix Boné <abonerib@bsc.es>
---
 m/hut/nginx.nix | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/m/hut/nginx.nix b/m/hut/nginx.nix
index 553e06e..f42aad7 100644
--- a/m/hut/nginx.nix
+++ b/m/hut/nginx.nix
@@ -26,6 +26,11 @@ in
         }
       ];
       extraConfig = ''
+        set_real_ip_from 127.0.0.1;
+        set_real_ip_from 84.88.52.107;
+        real_ip_recursive on;
+        real_ip_header X-Forwarded-For;
+
         location /git {
           rewrite ^/git$ / break;
           rewrite ^/git/(.*) /$1 break;