瀏覽代碼

Sets real_ip ranges to local network only

chaptergy 4 年之前
父節點
當前提交
df5836e573
共有 1 個文件被更改,包括 3 次插入3 次删除
  1. 3 3
      docker/rootfs/etc/nginx/nginx.conf

+ 3 - 3
docker/rootfs/etc/nginx/nginx.conf

@@ -58,11 +58,11 @@ http {
 	}
 
 	# Real IP Determination
-	# Docker subnet:
-	set_real_ip_from 172.0.0.0/8;
+	
 	# Local subnets:
 	set_real_ip_from 10.0.0.0/8;
-	set_real_ip_from 192.0.0.0/8;
+	set_real_ip_from 172.16.0.0/12; # Includes Docker subnet
+	set_real_ip_from 192.168.0.0/16;
 	# NPM generated CDN ip ranges:
 	include conf.d/include/ip_ranges.conf;
 	# always put the following 2 lines after ip subnets: