🐛: security.ip-blocked returns 2 remoteIp fields when behind NGINX

[PassiHD2004]

What happened?

Logs show this:
2025-02-24T19:59:44Z INFO Blocked IP address (security.ip-blocked) listenerId = "http", localPort = 8085, remoteIp = 127.0.0.1, remotePort = 38176, listenerId = "http", remoteIp = 192.168.0.5

causing e.g. the webhook trigger to only return 127.0.0.1 as remote ip.

How can we reproduce the problem?

• proxy_pass http/s

    location / {
        proxy_pass http://127.0.0.1:8085;
        proxy_set_header    X-Real-IP $remote_addr;
        proxy_set_header    Host $host;
        proxy_set_header    X-Forwarded-For $proxy_add_x_forwarded_for;
    }

• turn on Obtain remote IP from Forwarded header in HTTP Settings
• get an IP banned for HTTP (e.g. failed auth)
• look at logs or webhook, see Issue happen

Version

v0.11.x

What database are you using?

mySQL

What blob storage are you using?

mySQL

Where is your directory located?

Internal

What operating system are you using?

Linux

Relevant log output

Code of Conduct

• I agree to follow this project's Code of Conduct