Added correct resolving for source IP addresses in case of HTTP proxies

Dockerfiles/web-nginx-pgsql/ubuntu/conf/etc/zabbix/nginx.conf

@@ -2,6 +2,9 @@ server {
     listen 8080;
     listen [::]:8080;
 
+    {WEB_REAL_IP_FROM}
+    {WEB_REAL_IP_HEADER}
+
     server_name     zabbix;
     index           {HTTP_INDEX_FILE};
 

Dockerfiles/web-nginx-pgsql/ubuntu/conf/etc/zabbix/nginx_ssl.conf

@@ -2,6 +2,9 @@ server {
     listen 8443 ssl http2;
     listen [::]:8443 ssl http2;
 
+    {WEB_REAL_IP_FROM}
+    {WEB_REAL_IP_HEADER}
+
     server_name     zabbix;
     server_name_in_redirect off;
 

Dockerfiles/web-nginx-pgsql/ubuntu/docker-entrypoint.sh

@@ -32,6 +32,15 @@ NGINX_SSL_CONFIG_DIR="/etc/ssl/nginx"
 # PHP-FPM configuration file
 PHP_CONFIG_FILE="/etc/php/8.3/fpm/pool.d/zabbix.conf"
 
+escape_spec_char() {
+    local var_value=$1
+
+    var_value="${var_value//\\/\\\\}"
+    var_value="${var_value//./\\.}"
+
+    echo "$var_value"
+}
+
 # usage: file_env VAR [DEFAULT]
 # as example: file_env 'MYSQL_PASSWORD' 'zabbix'
 #    (will allow for "$MYSQL_PASSWORD_FILE" to fill in the value of "$MYSQL_PASSWORD" from a file)
@@ -209,6 +218,27 @@ prepare_web_server() {
     sed -i \
         -e "s/{EXPOSE_WEB_SERVER_INFO}/${EXPOSE_WEB_SERVER_INFO}/g" \
     "$NGINX_CONF_FILE"
+
+    [ ! -z "${WEB_REAL_IP_FROM}" ] && WEB_REAL_IP_FROM="set_real_ip_from ${WEB_REAL_IP_FROM};"
+    WEB_REAL_IP_FROM=$(escape_spec_char "$WEB_REAL_IP_FROM")
+    [ ! -z "${WEB_REAL_IP_HEADER}" ] && WEB_REAL_IP_HEADER="real_ip_header ${WEB_REAL_IP_HEADER};"
+    WEB_REAL_IP_HEADER=$(escape_spec_char "$WEB_REAL_IP_HEADER")
+
+    sed -i \
+        -e "s/{WEB_REAL_IP_FROM}/${WEB_REAL_IP_FROM}/g" \
+    "$ZABBIX_CONF_DIR/nginx.conf"
+
+    sed -i \
+        -e "s/{WEB_REAL_IP_FROM}/${WEB_REAL_IP_FROM}/g" \
+    "$ZABBIX_CONF_DIR/nginx_ssl.conf"
+
+    sed -i \
+        -e "s/{WEB_REAL_IP_HEADER}/${WEB_REAL_IP_HEADER}/g" \
+    "$ZABBIX_CONF_DIR/nginx.conf"
+
+    sed -i \
+        -e "s/{WEB_REAL_IP_HEADER}/${WEB_REAL_IP_HEADER}/g" \
+    "$ZABBIX_CONF_DIR/nginx_ssl.conf"
 }
 
 prepare_zbx_php_config() {