

Proxy_set_header Connection $http_connection Proxy_set_header X-Forwarded-Proto $scheme Proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for # allow nginx to start regardless of upstream endpoint state by using intermediary variable Ssl_certificate_key /etc/nginx/ssl/nginx.key Īdd_header Strict-Transport-Security "max-age=63072000 includeSubdomains preload" always Īdd_header X-Content-Type-Options nosniff Ssl_certificate /etc/nginx/ssl/nginx.crt Ssl_protocols TLSv1 TLSv1.1 TLSv1.2 # Dropping SSLv3, ref: POODLE My nginx has real_ip module (output of nginx -V below), and this is my nf. I tried also to add: set_real_ip_from 127.0.0.1 I checked doc, tried here (including removing the X-Real-IP header, as they suggest in this other question). (VM2.x) other servers feeding the backend with data (out of the question).(VM1) RESTful API served by a Java/Spring homemade backend (running in IntelliJ idea).(VM1) NgEngine serving the homemade frontend.

(VM1) nginx reverse proxy (it works, HTTPS layer I added at least).Client browser (another VM or remote desktop).On an existing nginx reverse proxy, I need to pass the client IP to a server (from nginx to the frontend served in NG-Engine, and from this to the backend), I tried a lot of sites, but the server is just receiving 127.0.0.1.Įxtra info (added after Michael Hampton question), our Virtual Machines infrastructure:
