From dbe7cc9ab1e1edc3fe1bf25fb2a7387189d88456 Mon Sep 17 00:00:00 2001
From: cnst <adam@cnst.dev>
Date: Wed, 16 Jul 2025 15:55:34 +0200
Subject: [PATCH] fail2ban test 11

---
 modules/server/vaultwarden/default.nix | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/modules/server/vaultwarden/default.nix b/modules/server/vaultwarden/default.nix
index 7b98a90a..c2e63ee5 100644
--- a/modules/server/vaultwarden/default.nix
+++ b/modules/server/vaultwarden/default.nix
@@ -24,7 +24,7 @@ in {
       encode zstd gzip
 
       reverse_proxy ${vcfg.ROCKET_ADDRESS}:${toString vcfg.ROCKET_PORT} {
-        header_up X-Real-IP {remote_host}
+        header_up X-Real-IP {http.request.header.Cf-Connecting-Ip}
       }
     '';