功能：扩展云管资源运维、账号授权及监控管理

deploy/compose.live.yml

@@ -26,6 +26,7 @@ services:
     environment:
       VDI_MODE: production
       VDI_LISTEN: 0.0.0.0:8080
+      VDI_TRUSTED_PROXIES: "172.16.0.0/12"
       VDI_JWT_SECRET: ${VDI_JWT_SECRET:?required}
       VDI_ADMIN_USERNAME: ${VDI_ADMIN_USERNAME:?required}
       VDI_ADMIN_PASSWORD: ${VDI_ADMIN_PASSWORD:?required}

deploy/nginx.conf

@@ -7,7 +7,7 @@ server {
   add_header X-Content-Type-Options nosniff always;
   add_header Referrer-Policy same-origin always;
   add_header X-Frame-Options DENY always;
-  location /api/ { proxy_pass http://api:8080; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for; }
+  location /api/ { proxy_pass http://api:8080; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $remote_addr; }
   location /healthz { proxy_pass http://api:8080; }
   location / { try_files $uri $uri/ /index.html; }
 }

deploy/nginx.live.conf

@@ -11,7 +11,7 @@ server {
   add_header X-Content-Type-Options nosniff always;
   add_header Referrer-Policy same-origin always;
   add_header X-Frame-Options DENY always;
-  location /api/ { proxy_pass http://api:8080; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $scheme; }
+  location /api/ { proxy_pass http://api:8080; proxy_set_header Host $host; proxy_set_header X-Forwarded-Proto $scheme; proxy_set_header X-Forwarded-For $remote_addr; }
   location /healthz { proxy_pass http://api:8080; }
   location / { try_files $uri $uri/ /index.html; }
 }