diff --git a/values.yaml b/values.yaml index bff0c53..1a76b3b 100644 --- a/values.yaml +++ b/values.yaml @@ -44,6 +44,28 @@ wordpress: # ads.txt content # google.com, pub-0000000000000000, DIRECT, f08c47fec0942fa0 +nginx: + extraConfig: | + # リアルIPの取得設定 + real_ip_header X-Forwarded-For; + real_ip_recursive on; + + # Kubernetesクラスタ内のIPレンジを信頼 + set_real_ip_from 10.0.0.0/8; + set_real_ip_from 172.16.0.0/12; + set_real_ip_from 192.168.0.0/16; + + # CloudflareやAWS ALB等を使っている場合は追加 + # set_real_ip_from 173.245.48.0/20; + # set_real_ip_from 103.21.244.0/22; + # ... (Cloudflareの他のIPレンジ) + + # FastCGIパラメータにリアルIPを渡す + fastcgiParams: + REMOTE_ADDR: $remote_addr + HTTP_X_REAL_IP: $realip_remote_addr + HTTP_X_FORWARDED_FOR: $proxy_add_x_forwarded_for + # Service設定 service: type: LoadBalancer