How to get the right client side IP address in logs while the planka runs behind a caddy2?

[peace4j]

I setup a planka behind a Caddy2 , with docker.

All things run well until I began to setup fail2ban. Because fail2ban uses the file /app/logs/planka.log, so I took a look at the file planka.log and found something like this:

2024-03-20 11:52:55 [W] Invalid password! (IP: 172.21.0.2)
2024-03-21 10:00:33 [W] Invalid email or username: "aabbcc"! (IP: 172.21.0.2)
2024-03-21 14:34:11 [W] Invalid email or username: "aaabbbccc"! (IP: 172.21.0.2)

The IP address here is obviously belongs to Caddy. It's not the real ip from client side.

Here's the settings in my Caddyfile:

planka.mysite.com {
    reverse_proxy  http://planka-planka-1:1337 {
        header_up Host {host}
        header_up X-Real-IP {remote}
        header_up X-Forwarded-For {remote}
    }
    import logger planka.mysite.com.log
}

Can anybody show me how to setup caddy2 or planka correctly so that the real ip of client side can be displayed in planka.log?
Thanks a lot!

[meltyshev]

Hi! I'm not very familiar with this, but you could try setting the environment variable TRUST_PROXY=1. I've checked in the code that when it's set, it should use the IP address from X-Forwarded-For:

// Assert if "X-Forwarded-For" header contains any addresses
if (process.env.TRUST_PROXY && !_.isEmpty(request.ips)) {
  // eslint-disable-next-line prefer-destructuring
  remoteAddress = request.ips[0];
}

[peace4j]

Hi ! It works!
After I set the environment variable TRUST_PROXY=1 in docker-compose.yml :

    environment:
      - BASE_URL=https://planka.mysite.cn
      - DATABASE_URL=postgresql://postgres@postgres/planka
      - SECRET_KEY=xxxxxxxxyyyyyyyyyzzzz
      - TRUST_PROXY=1

The log file shows:
2024-03-22 01:28:58 [W] Invalid email or username: "aabbcc"! (IP: real.ip.address.here:37761)

Thanks for your help!