Forwarding the true client IP Address

[alwynispat]

I have an NPM that helps to manage traffic to my NAS, Cloudron and other services.

It appears that Cloudron is reporting the client IP Address as my NPM address.
For my NAS, I’ll just need to indicate my Trusted Proxy IP Address and it’ll start reporting the true client IP Address.

Where can I do the same for Cloudron? TIA!

[nebulon]

Possibly the mastodon package then has to be adjusted to pick up the forwarded-for headers from the reverse proxy. Where in mastodon are the originating IP addresses used so we can validate a potential fix?

[girish]

In this setup, NPM makes the actually client call and thus Cloudron picks up that as the IP address. As you said, this requires us to change Cloudron's nginx configs to have a trusted proxy server setting and also then forward the X-Forwarded-For from the request to the apps.

I will move this as a feature request since we don't have this feature.

[girish]

FWIW, as a workaround - Cloudron itself can act as a NPM . https://docs.cloudron.io/apps/#app-proxy