Add realip configs

This commit is contained in:
Robert Partridge 2022-07-16 12:40:01 -04:00
parent 4e8960fac6
commit 5696ea4202
2 changed files with 39 additions and 0 deletions

View File

@ -0,0 +1,26 @@
set_real_ip_from 10.0.0.0/8;
set_real_ip_from 172.16.0.0/16;
set_real_ip_from 192.168.0.0/24;
set_real_ip_from 103.21.244.0/22;
set_real_ip_from 103.22.200.0/22;
set_real_ip_from 103.31.4.0/22;
set_real_ip_from 104.16.0.0/12;
set_real_ip_from 108.162.192.0/18;
set_real_ip_from 131.0.72.0/22;
set_real_ip_from 141.101.64.0/18;
set_real_ip_from 162.158.0.0/15;
set_real_ip_from 172.64.0.0/13;
set_real_ip_from 173.245.48.0/20;
set_real_ip_from 188.114.96.0/20;
set_real_ip_from 190.93.240.0/20;
set_real_ip_from 197.234.240.0/22;
set_real_ip_from 198.41.128.0/17;
set_real_ip_from 2400:cb00::/32;
set_real_ip_from 2606:4700::/32;
set_real_ip_from 2803:f800::/32;
set_real_ip_from 2405:b500::/32;
set_real_ip_from 2405:8100::/32;
set_real_ip_from 2c0f:f248::/32;
set_real_ip_from 2a06:98c0::/29;
real_ip_header X-Forwarded-For;

View File

@ -68,4 +68,17 @@ http {
##
#include /etc/nginx/cloudflare-only.conf;
##
# Real IP Configurations
# CHOOSE ONLY ONE
# - Enable the Cloudflare config if you're behind a Cloudflare proxy
# - Enable the Internal config if this system is behind an internal proxy
# - Enable the Hybrid config if this system is behind both CF and internal proxies
##
#include /etc/nginx/nginx-cloudflare-realip.conf
#include /etc/nginx/nginx-internal-realip.conf
#include /etc/nginx/nginx-hybrid-realip.conf
}