cpu
ca3ba141a7
added systemd service howto traefik nginix set_real_ip_from improved readme visuals fixed on mobile labels removed updated readme fixed visuals overlay for the hotkey disable screen lock clean up git precommit hooks clean up clean up update check for update feature added build-time information fixed date clean up added hook script fix fix fix hooks fixed webhook setup players stay in run all timers mode mqtt mqtt allways connected mqtt messages work capturing mqtt in edit player mqtt in Setup updated readme state of the mqtt Global Pass turn offline mode docs: update documentation to reflect current codebase and MQTT features - Update README.md with global MQTT commands - Enhance architecture.md with comprehensive data model and MQTT state - Update development.md with project structure and workflow - Remove redundant script listings - Fix formatting and organization rebase
47 lines
1.9 KiB
Nginx Configuration File
47 lines
1.9 KiB
Nginx Configuration File
# Existing log format often uses $remote_addr by default
|
|
# log_format main '$remote_addr - $remote_user [$time_local] "$request" '
|
|
# '$status $body_bytes_sent "$http_referer" '
|
|
# '"$http_user_agent" "$http_x_forwarded_for"';
|
|
|
|
# Add these lines within the http {} block, OR server {} block
|
|
# (http block is generally preferred for these directives)
|
|
# Make sure they are *before* the access_log directive if possible.
|
|
|
|
# --- Real IP Configuration ---
|
|
# Replace with the ACTUAL IP range(s) of your Traefik Docker network(s)
|
|
set_real_ip_from 172.22.0.0/16; # Example: Trust IPs from this subnet
|
|
# You can add multiple set_real_ip_from lines if needed
|
|
# set_real_ip_from 192.168.1.0/24; # Example if Traefik was also on another network
|
|
|
|
# Which header contains the real client IP?
|
|
# X-Forwarded-For handles multiple proxies better. X-Real-IP is simpler if only Traefik.
|
|
real_ip_header X-Real-IP;
|
|
|
|
# If using X-Forwarded-For, tell Nginx how to process it.
|
|
# 'on' means find the *last* IP address that is NOT from a trusted proxy.
|
|
# This is usually correct when behind one or more trusted proxies.
|
|
real_ip_recursive off;
|
|
# --- End Real IP Configuration ---
|
|
|
|
|
|
server {
|
|
listen 80;
|
|
listen [::]:80;
|
|
server_name localhost;
|
|
|
|
# Use the 'realip' processed $remote_addr in logs
|
|
# Ensure your access_log format uses $remote_addr (like 'combined' or 'main')
|
|
access_log /var/log/nginx/access.log combined; # Or your preferred format using $remote_addr
|
|
|
|
root /usr/share/nginx/html;
|
|
index index.html;
|
|
|
|
location / {
|
|
try_files $uri $uri/ /index.html;
|
|
}
|
|
}
|
|
|
|
# It's common practice to put realip config in the http block
|
|
# If your default.conf is included inside an existing http block in nginx.conf,
|
|
# placing the realip directives *outside* the server block but *inside* http is standard.
|
|
# If this file IS your entire http block, place them just before the server block. |