mirror of
https://github.com/makeplane/plane.git
synced 2026-06-14 03:30:00 +00:00
fix(nginx): correct real_ip_header typo X-Forward-For → X-Forwarded-For (#8935)
X-Forward-For is not a real HTTP header — the standard is X-Forwarded-For. With the typo, Nginx never replaces $remote_addr with the actual client IP, so rate limiting and IP logging see the proxy IP instead of the real client. Affects all three nginx configs (web, admin, space).
This commit is contained in:
@@ -11,7 +11,7 @@ http {
|
|||||||
|
|
||||||
set_real_ip_from 0.0.0.0/0;
|
set_real_ip_from 0.0.0.0/0;
|
||||||
real_ip_recursive on;
|
real_ip_recursive on;
|
||||||
real_ip_header X-Forward-For;
|
real_ip_header X-Forwarded-For;
|
||||||
limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;
|
limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;
|
||||||
|
|
||||||
access_log /dev/stdout;
|
access_log /dev/stdout;
|
||||||
|
|||||||
@@ -11,7 +11,7 @@ http {
|
|||||||
|
|
||||||
set_real_ip_from 0.0.0.0/0;
|
set_real_ip_from 0.0.0.0/0;
|
||||||
real_ip_recursive on;
|
real_ip_recursive on;
|
||||||
real_ip_header X-Forward-For;
|
real_ip_header X-Forwarded-For;
|
||||||
limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;
|
limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;
|
||||||
|
|
||||||
access_log /dev/stdout;
|
access_log /dev/stdout;
|
||||||
|
|||||||
@@ -11,7 +11,7 @@ http {
|
|||||||
|
|
||||||
set_real_ip_from 0.0.0.0/0;
|
set_real_ip_from 0.0.0.0/0;
|
||||||
real_ip_recursive on;
|
real_ip_recursive on;
|
||||||
real_ip_header X-Forward-For;
|
real_ip_header X-Forwarded-For;
|
||||||
limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;
|
limit_req_zone $binary_remote_addr zone=mylimit:10m rate=10r/s;
|
||||||
|
|
||||||
access_log /dev/stdout;
|
access_log /dev/stdout;
|
||||||
|
|||||||
Reference in New Issue
Block a user