From a3f4cba7faebf6372facbdcdb908f72a69c9dbed Mon Sep 17 00:00:00 2001
From: Stephen Morgan <stephen@doublethink.co.nz>
Date: Fri, 16 May 2025 15:10:35 +1200
Subject: [PATCH] fix: changes to envoy external ip headers for use by auth
 rate limiting

---
 ansible/files/envoy_config/lds.yaml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/ansible/files/envoy_config/lds.yaml b/ansible/files/envoy_config/lds.yaml
index 97481c889..a00b32a55 100644
--- a/ansible/files/envoy_config/lds.yaml
+++ b/ansible/files/envoy_config/lds.yaml
@@ -25,6 +25,9 @@ resources:
                     '@type': >-
                       type.googleapis.com/envoy.extensions.access_loggers.stream.v3.StdoutAccessLog
               generate_request_id: false
+              use_remote_address: true
+              xff_num_trusted_hops: 1
+              skip_xff_append: true
               http_filters:
                 - name: envoy.filters.http.cors
                   typed_config: