server { # ...some code listen 443 ssl proxy_protocol; # REAL-IP START real_ip_header proxy_protocol; set_real_ip_from 172.17.0.1/24; # REAL-IP END # ...some code }