Trusted IP Address

[alwynispat]

So I'm using the Trusted IP Address feature to add my Nginx Proxy Manager which is in front of the Cloudron.
My domains are protected by Cloudflare, so the apps are giving me Cloudflare's IP Addresses instead of the Users' actual IP Address.

Suggestions?

[girish]

@alwynispat not an expert on nginx proxy manager, but if you have a test subdomain without cloudflare proxying, maybe you can check if the client IPs are correct? Atleast, this lets us debug with 2 unknowns instead of 3 unknowns.

[BrutalBirdie]

Had a similar issue with Kubernetes and only seeing the IP of the Loadbalancer.
Magic word was https://docs.nginx.com/nginx/admin-guide/load-balancer/using-proxy-protocol/

[alwynispat]

So I think I've found the solution.
Modify the Proxy Host config > Advanced and paste the following:

set_real_ip_from    03.21.244.0/22;
set_real_ip_from    103.22.200.0/22;
set_real_ip_from    103.31.4.0/22;
set_real_ip_from    104.16.0.0/13;
set_real_ip_from    104.24.0.0/14;
set_real_ip_from    108.162.192.0/18;
set_real_ip_from    131.0.72.0/22;
set_real_ip_from    141.101.64.0/18;
set_real_ip_from    162.158.0.0/15;
set_real_ip_from    172.64.0.0/13;
set_real_ip_from    173.245.48.0/20;
set_real_ip_from    188.114.96.0/20;
set_real_ip_from    190.93.240.0/20;
set_real_ip_from    197.234.240.0/22;
set_real_ip_from    198.41.128.0/17;

#use any of the following two

real_ip_header CF-Connecting-IP;
#real_ip_header X-Forwarded-For;

this will allow True Client IP Address to be passed to Cloudron.