Skip to content

Commit df5836e

Browse files
committed
Sets real_ip ranges to local network only
1 parent 5e6ce86 commit df5836e

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

docker/rootfs/etc/nginx/nginx.conf

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -58,11 +58,11 @@ http {
5858
}
5959

6060
# Real IP Determination
61-
# Docker subnet:
62-
set_real_ip_from 172.0.0.0/8;
61+
6362
# Local subnets:
6463
set_real_ip_from 10.0.0.0/8;
65-
set_real_ip_from 192.0.0.0/8;
64+
set_real_ip_from 172.16.0.0/12; # Includes Docker subnet
65+
set_real_ip_from 192.168.0.0/16;
6666
# NPM generated CDN ip ranges:
6767
include conf.d/include/ip_ranges.conf;
6868
# always put the following 2 lines after ip subnets:

0 commit comments

Comments
 (0)