Ensure headscale sees the correct IP

2024-02-29 17:41:29 +00:00 · 2024-02-29 17:41:29 +00:00 · 8a1e21c79d
commit 8a1e21c79d
parent 998d798797
1 changed files with 4 additions and 0 deletions
--- a/ansible/roles/headscale/files/nginx.conf
+++ b/ansible/roles/headscale/files/nginx.conf
@ -13,6 +13,10 @@ server {
    ssl_trusted_certificate /etc/letsencrypt/live/headscale.jakehoward.tech/chain.pem;
    include includes/ssl.conf;

+    real_ip_header proxy_protocol;
+
+    set_real_ip_from 127.0.0.1;
+
    location / {
        proxy_pass http://localhost:8416;
    }