Fix real ip's from upstream proxies

1 files changed, 6 insertions, 2 deletions

diff --git a/create.py b/create.py
index bccdee2..258b998 100755
--- a/create.py
+++ b/create.py
@@ -148,7 +148,7 @@ class RoleGenerator:
                   - {{{{ {self.service}_base }}}}/volumes/data:/data
                 environment:
                   - TZ={{{{ timezone }}}}
-                  - DEPLOYMENT_TIME={{{{ now() }}}}
+                  - DEPLOYMENT_TIME={{{{ deployment_time }}}}
                 networks:
                   - proxy
                 healthcheck:
@@ -224,6 +224,11 @@ def create_nginx_conf(service_name: str):
         server {{
             listen 80;
             server_name {service_name}.liz.coffee;
+
+            real_ip_header X-Forwarded-For;
+            real_ip_recursive on;
+            set_real_ip_from {{{{ docker_network }}}};
+
             location / {{
                 proxy_pass https://{{{{ loadbalancer_ip }}}};
                 proxy_ssl_verify off;
@@ -231,7 +236,6 @@ def create_nginx_conf(service_name: str):
                 proxy_set_header Host $host;
                 proxy_set_header X-Real-IP $remote_addr;
                 proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-                proxy_set_header X-Forwarded-Proto $scheme;
                 proxy_set_header Upgrade $http_upgrade;
                 proxy_set_header Connection "upgrade";
             }}