From f4316c5ed7a2c86c33461ed921c64505a7661991 Mon Sep 17 00:00:00 2001
From: Olivier Navas <olivier.navas@libretic.fr>
Date: Mon, 9 Dec 2024 10:18:00 +0100
Subject: [PATCH] =?UTF-8?q?Ajoute=20un=20ent=C3=AAte=20X-Real-Ip=20vers=20?=
 =?UTF-8?q?les=20machines=20mandat=C3=A9es?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 templates/custom_reverse_proxy.conf | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/templates/custom_reverse_proxy.conf b/templates/custom_reverse_proxy.conf
index 0e482b9..a883937 100644
--- a/templates/custom_reverse_proxy.conf
+++ b/templates/custom_reverse_proxy.conf
@@ -155,6 +155,11 @@ SecRequestBodyLimitAction ProcessPartial
   ProxyPass /balancer-manager !
   ProxyPass / $protoDest://$urlDest/
   ProxyPassReverse / $protoDest://$vhostFQDN/
+
+  # Ajoute un entete X-Real-Ip avec l'adresse du client utile à traefik,
+  # le cas échéant, pour propager l'adresse du vrai client jusqu'à l'application
+  RequestHeader set X-Real-Ip "%{REMOTE_ADDR}s"
+
   # Configuration du chemin vers la page de status du load balancer
   <Location "/balancer-manager">
       SecRuleEngine off