respect X-Forwarded-For header for PyPI, trust everyone for now

pypi · Nov 28, 2013 · 2695dad · 2695dad
1 parent a932bad
commit 2695dad
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/provisioning/salt/roots/salt/pypi/config/pypi.nginx.app.conf.jinja b/provisioning/salt/roots/salt/pypi/config/pypi.nginx.app.conf.jinja
@@ -6,6 +6,9 @@ error_log /var/log/nginx/{{ config['name'] }}/error.log;
 
 add_header Strict-Transport-Security "max-age=31536000";
 
+set_real_ip_from 0.0.0.0/0;
+real_ip_header X-Forwarded-For;
+
 rewrite ^/$ {{ config['url'] }}/pypi redirect;
 
 location ~* ^/(pypi|daytime|mirrors|id|oauth|security).* {