Unit: Private IP address ranges are missing in the reverse proxy configuration, although they are specified in Nginx.

[jaydrogers]

Steps To Reproduce

TBD

Outcome

What did you expect?

• TBD

What happened instead?

• TBD

Affected Docker Images

Unit images only

Anything else?

Originally reported by @TheAndrey in https://github.com/serversideup/docker-php/issues/412:

Private IP address ranges are missing in the reverse proxy configuration, although they are specified in Nginx. I want to use Unit as an application server located behind the upstream Nginx on the host.

[jaydrogers]

I might circle back to this one with https://github.com/serversideup/docker-php/issues/450

To address this comment:

Private IP address ranges are missing in the reverse proxy configuration, although they are specified in Nginx. I want to use Unit as an application server located behind the upstream Nginx on the host.

Those CloudFlare IPs are only for the CF-Connecting-IP header.

We might have to create a separate specific section for 10.x.x.x, 192.168.x.x, etc using the X-Forwarded-For header, kind of like what @TheAndrey did in #450 :

  "listeners": {
    "*:8080": {
      "pass": "routes",
      "forwarded": {
        "client_ip": "X-Forwarded-For",
        "protocol": "X-Forwarded-Proto",
        "recursive": false,
        "source": [
          "172.16.0.0/12"
        ]
      }
    }
  },

[jaydrogers]

Closing this issue because NGINX Unit has been archived and is no longer maintained by the NGINX team: https://github.com/nginx/unit?tab=readme-ov-file#nginx-unit