X-Forwarded-For fix 2

2026-08-25 15:00:38 +02:00
parent b51bf0d094
commit fbdfbe954e
1 changed files with 4 additions and 1 deletions
@@ -24,9 +24,12 @@ module Api

    config.action_controller.forgery_protection_origin_check = false

+    # nginx → Traefik → Rails proxy chain: trust Docker + loopback ranges
+    # so request.remote_ip reads the real client IP from X-Forwarded-For
    config.action_dispatch.trusted_proxies = ActionDispatch::RemoteIp::TRUSTED_PROXIES + [
      IPAddr.new("172.16.0.0/12"),
-      IPAddr.new("10.0.0.0/8")
+      IPAddr.new("10.0.0.0/8"),
+      IPAddr.new("192.168.0.0/16")
    ]

    config.autoload_lib(ignore: %w[assets tasks])