Untitled

# Nginx Proxy Manager - Custom Proxy Host Template
# Includes Cloudflare real IP handling for GoAccess

real_ip_header CF-Connecting-IP;

# Optional: Add Cloudflare IP ranges if you want to explicitly allow them
# set_real_ip_from 103.21.244.0/22;
# set_real_ip_from 103.22.200.0/22;
# set_real_ip_from 103.31.4.0/22;
# set_real_ip_from 104.16.0.0/13;
# set_real_ip_from 104.24.0.0/14;
# set_real_ip_from 108.162.192.0/18;
# set_real_ip_from 131.0.72.0/22;
# set_real_ip_from 141.101.64.0/18;
# set_real_ip_from 162.158.0.0/15;
# set_real_ip_from 172.64.0.0/13;
# set_real_ip_from 173.245.48.0/20;
# set_real_ip_from 188.114.96.0/20;
# set_real_ip_from 190.93.240.0/20;
# set_real_ip_from 197.234.240.0/22;
# set_real_ip_from 198.41.128.0/17;

# Proxy host server block
server {
    listen 80;
    server_name %DOMAIN_NAME%;

    # SSL redirection if enabled in NPM
    %SSL_REDIRECT%

    access_log /var/log/nginx/%LOG_FILENAME%_access.log;
    error_log /var/log/nginx/%LOG_FILENAME%_error.log;

    location / {
        proxy_pass %UPSTREAM_URL%;
        proxy_set_header Host $host;
        proxy_set_header X-Real-IP $remote_addr;
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
        proxy_set_header X-Forwarded-Proto $scheme;
        proxy_set_header X-Forwarded-Host $host;
        proxy_set_header X-Forwarded-Port $server_port;
        proxy_set_header Upgrade $http_upgrade;
        proxy_set_header Connection $connection_upgrade;
        proxy_http_version 1.1;
        proxy_redirect off;
    }

    %SSL_CERT%
}