IP address - Docker

[Rustymage]

I've recently found this tool and use it on a docker image to point the outside world to some of my services. Some on Raspberry Pi's, some on a NUC.

This tool itself is running in the NUC.

What I've not understood is how to get the real IP address showing in those services. Currently it just shows me a docker IP address. An example is my Seafile service.

Is this a setting or line of code I'm missing? I'm not very experienced with docker so please be gentle!

Thanks in advance!

Rusty.

[jc21]

It's not a docker issue really, it's a nginx issue. Nginx needs to know what forwarding ip's to ignore when trying to determine the client's real ip address. The project already handles this for common services like AWS and Cloudfare. Currently there's no UI way of adding more IP ranges to this list but I'll add this to the feature request backlog.

[Rustymage]

I'm running via Cloudflare so I'm a little confused why this isn't working then.

Any troubleshooting suggestions? Or have I missed your point?

Cheers!

[vsc55]

Hi,
@Rustymage, do you want the server behind the reverse proxy to see the client's real ip?

If this is I get it by adding this in the advanced settings of the Proxy Host in Nginx:

proxy_set_header Host  $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

And the server behind the reverse proxy is apache, adding this configuration I have achieved that both apache and php get the real ip of the client.

RemoteIPHeader X-Forwarded-For
RemoteIPInternalProxy ip.server.proxy.inverse

[MattKobayashi]

Hey @jc21, any word on where this is at? I'm having a similar issue and trying to rewrite the headers as suggested by @vsc55 doesn't seem to be working for me.

[Cosmonear]

Hello @jc21 any news on this. I think it just need to add in the file "proxy.conf" this lines :

proxy_set_header Host  $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

Because it worked for me before using NPM, when i used this container : https://github.com/linuxserver/docker-swag

[jc21]

For the record, each proxy host already has these Nginx directives applied.

The IP ranges file defines some behaviour of Nginx in determining the value of the real IP header that it would send if you don't override it. Side note, this file should be empty in git and was committed with data by accident. The content of this file is immediately overwritten when the application is started (see this file) using the most current IP range lists from Cloudflare and Cloudfront.

Looking at the nginx docs for the real IP module I think the big problem here is the following:

real_ip_header X-Forwarded-For;

The default is X-Real-IP so might be better to leave it that way. I've made a docker build for this change but I'd like others to test it, without making any of those proxy_set_header definitions in your custom configuration for your host.

Anyone wanting to test can use this docker image:

jc21/nginx-proxy-manager:github-real_ip

In order to ensure that the Nginx configuration for your host is written, please edit your host and save it to trigger a re-write.

Note that this won't solve the initial enhancement, which is to allow a user-defined IP range for real IP determination.

[techsolo12]

Hello @jc21,

i have tested the real ip build, but for me it don't worked.
I builded the container and npm will work. Only the edit button do nothing.
After a restart i have this error.

[10/22/2020] [6:43:11 PM] [Migrate ] › ℹ info Current database version: 20201014143841 [10/22/2020] [6:43:12 PM] [Global ] › ✖ error Command failed: pip3 install ERROR: You must give at least one requirement to install (see "pip help install") WARNING: You are using pip version 20.1.1; however, version 20.2.4 is available. You should consider upgrading via the '/usr/bin/python3 -m pip install --upgrade pip' command.

So i upgraded pip with this command
/usr/bin/python3 -m pip install --upgrade pip

Now i have this error:
[10/22/2020] [6:48:33 PM] [Migrate ] › ℹ info Current database version: 20201014143841 [10/22/2020] [6:48:33 PM] [Global ] › ✖ error Command failed: pip3 install ERROR: You must give at least one requirement to install (see "pip help install")

At least with the real ip setting i don't see the real ip at host behind npm. Only the ip from npm.

[jc21]

That pip error should not occur anymore. I've been testing and concluded that the changes coming to v2.6.2 will fix the x-real-ip value not being set for you

[techsolo12]

@jc21 I can confirm that 2.6.2 forward the real ip, for me it works very well.
Thanks you for yoiur support and your project!

[Cosmonear]

Thanks @jc21
I just installed it and tried it.

• Now in the logfile of NPM i have the cloudflare IP (which i use as proxy to my server) and not the IP of the client whereas before the 2.6.2 update i had the real client IP in the NPM logfile.
• And now, in my dockers logfiles i have Cloudflare IP whereas i had the docker network gateway IP.

So, for me, it is not working... But a first step !

[zeroone82]

Thanks @jc21
I just installed it and tried it.

• Now in the logfile of NPM i have the cloudflare IP (which i use as proxy to my server) and not the IP of the client whereas before the 2.6.2 update i had the real client IP in the NPM logfile.
• And now, in my dockers logfiles i have Cloudflare IP whereas i had the docker network gateway IP.

So, for me, it is not working... But a first step !

Same for me, I'm getting Cloudflare IPs on destination host even thought all IPs are in ip_ranges.conf

[Rustymage]

So I just tried the latest and the jc21/nginx-proxy-manager:github-real_ip images and I am getting Cloudflare IPs int he logs.

I have reverted to 2.6.0 & I now get the client IP again.

[Rustymage]

Going to close as I have the real IPs in the containers at this current moment. Thanks for the efforts!