diff --git a/modules/server/vaultwarden/default.nix b/modules/server/vaultwarden/default.nix
index 7b98a90a..c2e63ee5 100644
--- a/modules/server/vaultwarden/default.nix
+++ b/modules/server/vaultwarden/default.nix
@@ -24,7 +24,7 @@ in {
       encode zstd gzip
 
       reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT} {
-        header_up X-Real-IP {remote_host}
+        header_up X-Real-IP {http.request.header.Cf-Connecting-Ip}
       }
     '';