💬 Commented on "trustProxy: falseã§IPベースã®ãƒ¬ãƒ¼ãƒˆãƒªãƒŸãƒƒãƒˆãŒæ©Ÿèƒ½ã—ãªã„ãªã©ã®å•é¡ŒãŒã‚ã‚‹": samunohito "> （ã†ã¡ãŒinternet -> cloudflare -> nginx -> Misskeyã®æ§‹æˆãªã®ã§æ¤œè¨¼ã—ãŸã„）
ã‚„ã£ã¦ãã¾ã—ãŸã€‚
cloudflareã‚’æŒŸã‚€å ´åˆã€nginxã®è¨å®šã‚‚å¿…è¦ãã†ã§ã™
---
â‘
GitHub
trustProxy: falseã§IPベースã®ãƒ¬ãƒ¼ãƒˆãƒªãƒŸãƒƒãƒˆãŒæ©Ÿèƒ½ã—ãªã„ãªã©ã®å•é¡ŒãŒã‚ã‚‹ · Issue #16994 · misskey-dev/misskey
今ã¾ã§ trustProxy: true ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã ã£ãŸãŒã€è„†å¼±æ€§ã§ã‚ã‚‹(IPアドレスをå½è£…ã—ã¦ãƒ¬ãƒ¼ãƒˆãƒªãƒŸãƒƒãƒˆã‚’ãƒã‚¤ãƒ‘スã§...
ã®å®Ÿè£… +
GitHub
trustProxy: falseã§IPベースã®ãƒ¬ãƒ¼ãƒˆãƒªãƒŸãƒƒãƒˆãŒæ©Ÿèƒ½ã—ãªã„ãªã©ã®å•é¡ŒãŒã‚ã‚‹ · Issue #16994 · misskey-dev/misskey
今ã¾ã§ trustProxy: true ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã ã£ãŸãŒã€è„†å¼±æ€§ã§ã‚ã‚‹(IPアドレスをå½è£…ã—ã¦ãƒ¬ãƒ¼ãƒˆãƒªãƒŸãƒƒãƒˆã‚’ãƒã‚¤ãƒ‘スã§...
ã®IPv6
```ts
const fastify = Fastify({
trustProxy: this.config.trustProxy ?? [
'10.0.0.0/8', '172.16.0.0/12', '192.168.0.0/16', '127.0.0.1/32', '::1/128', 'fc00::/7'
],
logger: false,
});
```
---
â‘¡[Hubã«è¨˜è¼‰ã•ã‚Œã¦ã„ãŸnginxã®è¨å®š](
Misskey
Nginxã®è¨å®š | Misskey
nginxをリãƒãƒ¼ã‚¹ãƒ—ãƒã‚ã‚·ã¨ã—ã¦æ´»ç”¨ã—ã€Misskeyサーãƒãƒ¼ã‚’直接インターãƒãƒƒãƒˆã«å…¬é–‹ã›ãšé‹ç”¨ã™ã‚‹ã“ã¨ã‚’ãŠå‹§ã‚...
) + cloudflareã®ãƒ‰ã‚ュメントã«[記載ã•ã‚Œã¦ã„ãŸã‚µãƒ³ãƒ—ル](
Cloudflare Docs
Restoring original visitor IPs
When your website traffic is routed through the Cloudflare network, we act as a reverse proxy. This allows Cloudflare to speed up page load time by...
) + cloudflareãŒ[公開](
https://www.cloudflare.com/ips/)ã—ã¦ã„ã‚‹IP一覧
```txt
...
# Proxy to Node
location / {
proxy_pass
http://127.0.0.1:3000;
proxy_set_header Host $host;
proxy_http_version 1.1;
proxy_redirect off;
# ---- 追記ã“ã“ã‹ã‚‰ ----
real_ip_header CF-Connecting-IP;
real_ip_recursive on;
set_real_ip_from 173.245.48.0/20;
set_real_ip_from 103.21.244.0/22;
set_real_ip_from 103.22.200.0/22;
set_real_ip_from 103.31.4.0/22;
set_real_ip_from 141.101.64.0/18;
set_real_ip_from 108.162.192.0/18;
set_real_ip_from 190.93.240.0/20;
set_real_ip_from 188.114.96.0/20;
set_real_ip_from 197.234.240.0/22;
set_real_ip_from 198.41.128.0/17;
set_real_ip_from 162.158.0.0/15;
set_real_ip_from 104.16.0.0/13;
set_real_ip_from 104.24.0.0/14;
set_real_ip_from 172.64.0.0/13;
set_real_ip_from 131.0.72.0/22;
set_real_ip_from 2400:cb00::/32;
set_real_ip_from 2606:4700::/32;
set_real_ip_from 2803:f800::/32;
set_real_ip_from 2405:b500::/32;
set_real_ip_from 2405:8100::/32;
set_real_ip_from 2a06:98c0::/29;
set_real_ip_from 2c0f:f248::/32;
# ---- 追記ã“ã“ã¾ã§ ----
# If it's behind another reverse proxy or CDN, remove the following.
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
...
```
---
実際ã«ãƒã‚°ã‚¤ãƒ³å±¥æ´ã§ç¢ºèªã—ã¦ã¿ãŸã‚‚ã®â†“
- 下段：configもソースも何も対応ã—ã¦ãªã„（2025.12.0ã®ç´ ã®çŠ¶æ…‹ã«è¿‘ã„）
- ä¸æ®µï¼šâ‘ ã ã‘æ–½ã—ãŸçŠ¶æ…‹ã€‚cloudflareãŒå…¬é–‹ã—ã¦ã„ã‚‹IP帯ã®ä¸ã«ã‚ã‚‹ã‚‚ã®ã ã£ãŸï¼ˆä¸€å¿œä¼ã›ãŸï¼‰
- 上段：①ã¨â‘¡ã‚’æ–½ã—ãŸçŠ¶æ…‹ã€‚自宅ã®IPv6ãŒè¨˜éŒ²ã•ã‚Œã¦ã„ã‚‹"
GitHub
trustProxy: falseã§IPベースã®ãƒ¬ãƒ¼ãƒˆãƒªãƒŸãƒƒãƒˆãŒæ©Ÿèƒ½ã—ãªã„ãªã©ã®å•é¡ŒãŒã‚ã‚‹ · Issue #16994 · misskey-dev/misskey
今ã¾ã§ trustProxy: true ãŒãƒ‡ãƒ•ã‚©ãƒ«ãƒˆã ã£ãŸãŒã€è„†å¼±æ€§ã§ã‚ã‚‹(IPアドレスをå½è£…ã—ã¦ãƒ¬ãƒ¼ãƒˆãƒªãƒŸãƒƒãƒˆã‚’ãƒã‚¤ãƒ‘スã§...
