Unable to see real client IP address for DoT/DoH

[prashantkamdar]

Apologies

This is not a bug or a feature request, but a help request:

I am using dockerised adguard with nginx. Everything is working fine including DoT/DoH.
The problem I am facing is that the real IP address is not showing up when doing DoT queries in the query log.
The IP that shows up is the docker's IP on the host server - 172.17.0.1

My nginx is built with --with-http_realip_module as prescribed in the adguard's docs.

I have tried the following:

server
{
  listen 443 ssl;
  access_log /var/log/nginx/adguard.access.log;
  error_log /var/log/nginx/adguard.error.log;
  ssl_certificate domain.cert.pem;
  ssl_certificate_key private.key.pem;
  server_name adguard.7thking.xyz;

  location /
  {
    proxy_pass http://127.0.0.1:1080/;
    proxy_redirect / /;
    proxy_cookie_path / /;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }

  location /dns-query
  {
    proxy_pass http://127.0.0.1:1080;
    proxy_bind 127.0.0.1;
    proxy_set_header        X-Real-IP          $remote_addr;
    proxy_set_header        X-Forwarded-For    $proxy_add_x_forwarded_for;
  }
}

But I am not getting anywhere.

I have the following in my AdGuardHome.yaml for trusted proxies:

  trusted_proxies:
  - 127.0.0.0/8
  - ::1/128

Can someone please guide how to get the IP for DoT/DoH with nginx and dockered adguardhome?

[ainar-g]

If the queries look like they're coming from 172.17.0.1, consider adding that address to the trusted_proxies.

[prashantkamdar]

thank you!
that worked!

[quyleanh]

@prashantkamdar could you please show your full docker/docker-compose config?

I have a problem described here and would like to refer your config. Thank you.

[quyleanh]

Thank you for your response.

So you can access to dashboard by enter normal domain (without :1080 or :10443 postfix) right?
Are you using https for dashboard site?

[prashantkamdar]

I have nginx reverse proxy on the same server
and yes, i access the dashboard on https

this is my nginx conf:

server
{
  listen 443 ssl;
  access_log /var/log/nginx/adguard.access.log;
  error_log /var/log/nginx/adguard.error.log;
  ssl_certificate domain.cert.pem;
  ssl_certificate_key private.key.pem;
  server_name DOMAIN_NAME.COM;

  location /
  {
    proxy_pass http://127.0.0.1:1080/;
    proxy_redirect / /;
    proxy_cookie_path / /;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
  }

  location /dns-query
  {
    proxy_pass http://127.0.0.1:1080;
    proxy_bind 127.0.0.1;
    proxy_set_header        X-Real-IP          $remote_addr;
    proxy_set_header        X-Forwarded-For    $proxy_add_x_forwarded_for;
  }
}

[quyleanh]

How can. I did almost the same as your.

Could you please take a look at my discussion?

[prashantkamdar]

Follow the reco given - #4656 (comment)

[quyleanh]

I did but it didn't help :'(