From 326be31afaf96786c5adcdef639870e9238fe9e8 Mon Sep 17 00:00:00 2001 From: Giacomo Sanchietti Date: Mon, 6 Jul 2026 08:23:26 +0200 Subject: [PATCH] fix(nginx): replace X-Forwarded-For header Prevent X-Forwarded-For header forgery. Remove unused X-Real-IP header --- packages/ns-ui/files/00ns.locations | 2 +- packages/ns-ui/files/ns-ui | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/packages/ns-ui/files/00ns.locations b/packages/ns-ui/files/00ns.locations index 8ff345614..06a94843a 100644 --- a/packages/ns-ui/files/00ns.locations +++ b/packages/ns-ui/files/00ns.locations @@ -7,7 +7,7 @@ location / { location /api/ { proxy_set_header Host $host; - proxy_set_header X-Real-IP $remote_addr; + proxy_set_header X-Forwarded-For $remote_addr; proxy_pass http://127.0.0.1:8090/api/; proxy_read_timeout 180s; } diff --git a/packages/ns-ui/files/ns-ui b/packages/ns-ui/files/ns-ui index ef8049c59..b7ff5d27f 100755 --- a/packages/ns-ui/files/ns-ui +++ b/packages/ns-ui/files/ns-ui @@ -57,7 +57,7 @@ server { location /api/ { proxy_set_header Host \$host; - proxy_set_header X-Real-IP \$remote_addr; + proxy_set_header X-Forwarded-For \$remote_addr; proxy_pass http://127.0.0.1:8090/api/; proxy_read_timeout 180s; }