diff --git a/ansible/roles/ooni-backend/templates/nginx-api-fsn.conf b/ansible/roles/ooni-backend/templates/nginx-api-fsn.conf index 9d6e1451..804c61e0 100644 --- a/ansible/roles/ooni-backend/templates/nginx-api-fsn.conf +++ b/ansible/roles/ooni-backend/templates/nginx-api-fsn.conf @@ -218,6 +218,10 @@ server { # If remote_addr is ams-pg trust the X-Real-IP header set $external_remote_addr $http_x_real_ip; } + if ($remote_addr = "3.71.175.168") { + # If remote_addr is our AWS instance, trust the X-Real-IP header + set $external_remote_addr $http_x_real_ip; + } proxy_set_header X-Real-IP $external_remote_addr; proxy_cache apicache;