fix: use X-Real-IP header for remote IP (#1221)

Author: ashhhleyyy

Dockerfile

@@ -36,8 +36,10 @@ RUN a2enmod rewrite ssl
 # Fixes for running on ARM
 RUN echo "Mutex posixsem" >> /etc/apache2/apache2.conf
 
+RUN echo "127.0.0.0/8" >> /etc/apache2/trusted-proxies.txt
+
 COPY sample_configs/apache.conf /etc/apache2/sites-available/myradio.conf
-RUN a2dissite 000-default && a2ensite myradio && apachectl -S
+RUN a2enmod remoteip && a2dissite 000-default && a2ensite myradio && apachectl -S
 
 COPY --from=composer:latest /usr/bin/composer /usr/local/bin/composer
 

Dockerfile.prod

@@ -27,7 +27,7 @@ RUN openssl req -nodes -new -subj "/C=GB/ST=North Yorkshire/L=York/O=University
 RUN a2enmod rewrite ssl
 
 COPY sample_configs/apache.conf /etc/apache2/sites-available/myradio.conf
-RUN a2dissite 000-default && a2ensite myradio && apachectl -S
+RUN a2enmod remoteip && a2dissite 000-default && a2ensite myradio && apachectl -S
 
 COPY --from=composer:latest /usr/bin/composer /usr/local/bin/composer
 

sample_configs/apache.conf

@@ -1,6 +1,10 @@
 # Used to enable local testing. You should of course disable HTTP API access in the real world.
 <VirtualHost *:80>
   DocumentRoot /var/www
+
+  RemoteIPTrustedProxyList /etc/apache2/trusted-proxies.txt
+  RemoteIPHeader X-Real-IP
+
   Alias /api /var/www/myradio/src/PublicAPI
   <Directory /var/www/myradio/src/PublicAPI>
     Require all granted
@@ -36,6 +40,8 @@
   ServerAdmin webmaster@localhost
   DocumentRoot /var/www
 
+  RemoteIPTrustedProxyList /etc/apache2/trusted-proxies.txt
+  RemoteIPHeader X-Real-IP
 
   Alias /myradio /var/www/myradio/src/Public
   <Directory /var/www/myradio/src/Public>