ip again

Author: paulgroves

nginx.conf

@@ -1,5 +1,20 @@
 events {}
 http {
+    # Cloudflare real IP configuration
+    set_real_ip_from 173.245.48.0/20;
+    set_real_ip_from 103.21.244.0/22;
+    set_real_ip_from 141.101.64.0/18;
+    set_real_ip_from 108.162.192.0/18;
+    set_real_ip_from 190.93.240.0/20;
+    set_real_ip_from 188.114.96.0/20;
+    set_real_ip_from 198.41.128.0/17;
+    set_real_ip_from 162.158.0.0/15;
+    set_real_ip_from 104.16.0.0/13;
+    set_real_ip_from 172.64.0.0/13;
+    # Render.com internal IPs (10.223.x.x range)
+    set_real_ip_from 10.223.0.0/16;
+    real_ip_header CF-Connecting-IP;
+
     # Debug logging format to see all IP variables
     log_format debug_ips '$remote_addr - $realip_remote_addr - $http_cf_connecting_ip - $http_x_forwarded_for - $http_x_real_ip';
     server {
@@ -10,22 +25,22 @@ http {
         access_log /dev/stdout debug_ips;
 
         location /lib.min.js {
-            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Real-IP $realip_remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_pass https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js;
         }
 
         location /lib.js {
-            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Real-IP $realip_remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_pass https://cdn.mxpnl.com/libs/mixpanel-2-latest.js;
         }
 
         location /decide {
             proxy_set_header Host decide.mixpanel.com;
-            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Real-IP $realip_remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -34,7 +49,7 @@ http {
 
         location / {
             proxy_set_header Host api.mixpanel.com;
-            proxy_set_header X-Real-IP $remote_addr;
+            proxy_set_header X-Real-IP $realip_remote_addr;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_set_header X-Forwarded-Proto $scheme;