From 64ac07efc085c5bffe668fca5602b7b8a49e3aea Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Jakub=20Soko=C5=82owski?= <jakub@status.im>
Date: Tue, 7 Jul 2020 19:20:27 +0200
Subject: [PATCH] add nginx headers to forward real client IPs
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Signed-off-by: Jakub Sokołowski <jakub@status.im>
---
 ansible/group_vars/referral.yml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/ansible/group_vars/referral.yml b/ansible/group_vars/referral.yml
index d6812a0..c0e2b84 100644
--- a/ansible/group_vars/referral.yml
+++ b/ansible/group_vars/referral.yml
@@ -34,5 +34,9 @@ nginx_sites:
     - ssl_certificate_key /certs/status.im/origin.key
 
     - location / {
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Proto $scheme;
+        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Real-IP $remote_addr;
         proxy_pass http://localhost:{{ referral_srv_app_port }}/;
       }