openvibers/openvibe.ai Commits

nginx: the commented template for exposing /api/ sets the client-IP headers from $remote_addr (X-Real-IP, X-Forwarded-For, CF-Connecting-IP), like every active location, instead of $proxy_add_x_forwarded_for, which passes a client-sent X-Forwarded-For through if someone uncomments it (browser-check follow-up, WS-Q task 3; the active locations already set all three). Comment only

OP OpenVibers committed 26 Sept 2026 · f7be9bd315 · 1 file, +3 −1


Changes

ddiff --git a/deploy/nginx/ai.openvibe.network.conf b/deploy/nginx/ai.openvibe.network.conf
iindex 6d77e1a..3aff6ed 100644
---- a/deploy/nginx/ai.openvibe.network.conf
++++ b/deploy/nginx/ai.openvibe.network.conf
@@@ -55,7 +55,9 @@ server {
# proxy_pass http://127.0.0.1:4700;
# proxy_http_version 1.1;
# proxy_set_header Host $host;
-- # proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
++ # proxy_set_header X-Real-IP $remote_addr; # client address from $remote_addr only (realip),
++ # proxy_set_header X-Forwarded-For $remote_addr; # never appended to or passed through
++ # proxy_set_header CF-Connecting-IP $remote_addr;
# proxy_set_header X-Forwarded-Proto $scheme;
# proxy_read_timeout 90s; # ?wait= holds a request up to 60 s
}