ip again again

Author: paulgroves

nginx.conf

@@ -15,6 +15,12 @@ http {
     set_real_ip_from 10.223.0.0/16;
     real_ip_header CF-Connecting-IP;
 
+    # Map to get the most reliable client IP
+    map $http_cf_connecting_ip $client_ip {
+        "" $remote_addr;
+        default $http_cf_connecting_ip;
+    }
+
     # Debug logging format to see all IP variables
     log_format debug_ips '$remote_addr - $realip_remote_addr - $http_cf_connecting_ip - $http_x_forwarded_for - $http_x_real_ip';
     server {
@@ -25,22 +31,22 @@ http {
         access_log /dev/stdout debug_ips;
 
         location /lib.min.js {
-            proxy_set_header X-Real-IP $realip_remote_addr;
+            proxy_set_header X-Real-IP $client_ip;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_pass https://cdn.mxpnl.com/libs/mixpanel-2-latest.min.js;
         }
 
         location /lib.js {
-            proxy_set_header X-Real-IP $realip_remote_addr;
+            proxy_set_header X-Real-IP $client_ip;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_pass https://cdn.mxpnl.com/libs/mixpanel-2-latest.js;
         }
 
         location /decide {
             proxy_set_header Host decide.mixpanel.com;
-            proxy_set_header X-Real-IP $realip_remote_addr;
+            proxy_set_header X-Real-IP $client_ip;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_set_header X-Forwarded-Proto $scheme;
@@ -49,7 +55,7 @@ http {
 
         location / {
             proxy_set_header Host api.mixpanel.com;
-            proxy_set_header X-Real-IP $realip_remote_addr;
+            proxy_set_header X-Real-IP $client_ip;
             proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
             proxy_set_header X-Forwarded-Host $server_name;
             proxy_set_header X-Forwarded-Proto $scheme;