Self hosted plausible on MicroK8S + wordpress + proxy, geolocation all in the same country

[semanticfire]

Hi,

I'm running a self-hosted instance for plausible, it monitors WordPress websites with the plugin.
To circumvent ad blockers, I use the nginx proxy setup with some modifications to the plugin (plausible/wordpress#228)
Now in the dashboard all my visitor seem to come from one country? any idea?

Bart

[ruslandoga]

👋 @semanticfire

Maybe NGINX doesn't set x-forwarded-for header? Please double check your proxy_set_header in NGINX configuration.

[semanticfire]

This is what I have

  location ~ /js/stats.(?<target>(.*?)).js {
        proxy_pass https://stats.netage.nl/js/plausible.$target.js?ver=2.1.4;
        proxy_set_header Host stats.netage.nl;
}

and

location = /api/event {
        proxy_pass $plausible_event_url;
        proxy_set_header Host example.com;
        #proxy_buffering on;
        proxy_http_version 1.1;

        proxy_set_header X-Forwarded-For   $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host  $host;
    }

[semanticfire]

to be clear the x.x.x.x is not the ip of the k8s server, its from the web server.
is there an nginx running in the docker container of plausible?

[ruslandoga]

is there an nginx running in the docker container of plausible?

No :)

[semanticfire]

I've implemented a solution on the ingress, need to check tomorrow if now other countries popup, keep you posted

[semanticfire]

Okay it was indeed the double proxy,

nginx [wordpress server] -> nginx-ingress -> plausible the problem was with the nginx-ingress which cleared and modified the headers causing the wordpress server to provide the IP.

I've followed this guide to update the nginx-ingress
https://marcolenzo.eu/configure-microk8s-nginx-ingress/

short version, add the following to the data part of the ingress configmap

use-forwarded-headers: "true"

So follow up question would be, where to document this??

[ruslandoga]

Nice!

So follow up question would be, where to document this??

I think it's OK as a solution in this discussion. Nobody really reads the documentation or our CE wiki :)