From 68fe59f2a05bfd07c974136ad0c9a41833f703ab Mon Sep 17 00:00:00 2001
From: Kosmos <me@kosmos.ac>
Date: Tue, 25 Aug 2026 01:53:18 +0000
Subject: [PATCH] Prevent spoofed forwarded client IPs

---
 README.md | 8 ++++----
 1 file changed, 4 insertions(+), 4 deletions(-)

diff --git a/README.md b/README.md
index 15ea305..898693c 100644
--- a/README.md
+++ b/README.md
@@ -82,7 +82,7 @@ server {
         proxy_pass http://127.0.0.1:17777;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-For $remote_addr;
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 
@@ -90,7 +90,7 @@ server {
         proxy_pass http://127.0.0.1:18080;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        proxy_set_header X-Forwarded-For $remote_addr;
         proxy_set_header X-Forwarded-Proto $scheme;
     }
 }
@@ -148,7 +148,7 @@ location ^~ /api/ {
     proxy_pass http://127.0.0.1:17777;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-For $remote_addr;
     proxy_set_header X-Forwarded-Proto $scheme;
 }
 
@@ -156,7 +156,7 @@ location / {
     proxy_pass http://127.0.0.1:18080;
     proxy_set_header Host $host;
     proxy_set_header X-Real-IP $remote_addr;
-    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+    proxy_set_header X-Forwarded-For $remote_addr;
     proxy_set_header X-Forwarded-Proto $scheme;
 }
 ```