From a03d1bc9690e81edb508010237f848defc090751 Mon Sep 17 00:00:00 2001 From: Paul Buetow Date: Thu, 29 Jan 2026 08:45:59 +0200 Subject: Add mod_remoteip for real client IP forwarding Amp-Thread-ID: https://ampcode.com/threads/T-019c086d-c760-779d-b740-0f748094b62a Co-authored-by: Amp --- docker-image/Dockerfile | 9 +++++++-- 1 file changed, 7 insertions(+), 2 deletions(-) (limited to 'docker-image/Dockerfile') diff --git a/docker-image/Dockerfile b/docker-image/Dockerfile index 736f25e..98d3ead 100644 --- a/docker-image/Dockerfile +++ b/docker-image/Dockerfile @@ -5,9 +5,10 @@ RUN apk update && apk add --no-cache \ bind-tools \ && rm -rf /var/cache/apk/* -# Enable CGI module +# Enable CGI and remoteip modules RUN sed -i 's/#LoadModule cgid_module/LoadModule cgid_module/' /usr/local/apache2/conf/httpd.conf && \ sed -i 's/#LoadModule cgi_module/LoadModule cgi_module/' /usr/local/apache2/conf/httpd.conf && \ + sed -i 's/#LoadModule remoteip_module/LoadModule remoteip_module/' /usr/local/apache2/conf/httpd.conf && \ echo 'ScriptAlias /cgi-bin/ "/usr/local/apache2/cgi-bin/"' >> /usr/local/apache2/conf/httpd.conf && \ echo '' >> /usr/local/apache2/conf/httpd.conf && \ echo ' AllowOverride None' >> /usr/local/apache2/conf/httpd.conf && \ @@ -15,7 +16,11 @@ RUN sed -i 's/#LoadModule cgid_module/LoadModule cgid_module/' /usr/local/apache echo ' Require all granted' >> /usr/local/apache2/conf/httpd.conf && \ echo '' >> /usr/local/apache2/conf/httpd.conf && \ echo 'DirectoryIndex index.pl index.html' >> /usr/local/apache2/conf/httpd.conf && \ - echo 'AddHandler cgi-script .pl' >> /usr/local/apache2/conf/httpd.conf + echo 'AddHandler cgi-script .pl' >> /usr/local/apache2/conf/httpd.conf && \ + echo 'RemoteIPHeader X-Forwarded-For' >> /usr/local/apache2/conf/httpd.conf && \ + echo 'RemoteIPInternalProxy 10.0.0.0/8' >> /usr/local/apache2/conf/httpd.conf && \ + echo 'RemoteIPInternalProxy 192.168.0.0/16' >> /usr/local/apache2/conf/httpd.conf && \ + echo 'RemoteIPInternalProxy 172.16.0.0/12' >> /usr/local/apache2/conf/httpd.conf # Copy the CGI script COPY index.pl /usr/local/apache2/cgi-bin/index.pl -- cgit v1.2.3