Unable to display real ip in Authentication Logs.

[dnomd343]

Ask a Question!

I use Nginx as a reverse proxy, which forwards the data to Portainer, and the login origin ip address can be seen in Authentication Logs. But the IP address displayed in the panel is the internal network (like 127.0.0.1 or 172.19.0.3), which is the address of the Nginx service.

I used the following nginx configuration and forwarded the X-Real-IP http header, but it did not take effect.

location / {
    proxy_pass http://localhost:9000/;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
}

I also tried the nginx-proxy solution given in the document, but the results were similar, except that the origin ip became 172.19.0.3, which is the ip of the Nginx container.

version: "2"

services:
  nginx-proxy:
    image: nginxproxy/nginx-proxy
    restart: always
    ports:
      - "80:80"
    volumes:
      - "/var/run/docker.sock:/tmp/docker.sock:ro"

  portainer:
    image: portainer/portainer-ee:latest
    command: -H unix:///var/run/docker.sock
    restart: always
    environment:
      - VIRTUAL_HOST=portainer.yourdomain.com
      - VIRTUAL_PORT=9000
    ports:
      - 8000:8000
    volumes:
      - /var/run/docker.sock:/var/run/docker.sock
      - portainer_data:/data

volumes:
  portainer_data:

I need to have the Portainer panel show the real origin ip, is there any way to do this.

[jamescarppe]

Not at present, though we do have an internal ticket already open around adding this in the future - I don't have any ETA however. I have moved this to the Ideas category to track as a feature request.

Internal Ref: PCT-210

[dnomd343]

Thank you for your reply. I believe this is a very important feature. After all, portainer already provides the --base-url option, which is prepared for reverse proxy.
On the other hand, quite a few companies use CDN services. The lack of this function means that the address of the CDN server will be displayed in the log, and this is meaningless. Since it is a function only available in the business version, I think many teams will need it.

[mapxn]

Hopefully, this feature will be implemented soon.🚀