mirror of
https://github.com/oqyude/nixos.git
synced 2026-10-07 20:47:14 +03:00
oqyude
2cd636b6d4
With podman bridge networking, 3x-ui no longer sees the actual client IP — it sees the bridge gateway. Without explicit proxy_set_header directives, subscription URLs, geo-rules, logs and fail2ban will all treat every request as coming from the same IP. Apply Host/X-Real-IP/X-Forwarded-For/X-Forwarded-Proto to all 3x-ui locations so the panel keeps working as if it were on host network.