ns8-piler: nginx logs Traefik address instead of the real client #8283

Activity

1. stephdl

   self-assigned this

   on Oct 29, 2026
2. stephdl

   added this to the NethServer 8.11 milestone on Oct 29, 2026
3. stephdl

   added the

   Bug

   issue type on Oct 29, 2026
4. stephdl

   added this to NethServeron Oct 29, 2026
5. github-project-automation

   moved this to ToDo in NethServeron Oct 29, 2026
6. stephdl

   moved this from ToDo to In Progress in NethServeron Oct 29, 2026
7. stephdl

   added a commit that references this issue on Oct 30, 2026

   fix(piler-server): log the real client address (#147)

   ...

   7c5393b
8. stephdl commented on Oct 30, 2026

   

   stephdl

   on Oct 30, 2026

   Author

   More actions

   QA ns8-piler 1.3.3-dev.1

   Fix: nginx logs the real client address instead of the Traefik address (NethServer/ns8-piler#147).

   Setup

   Update an existing piler instance (here piler1) to the test image:

   api-cli run update-module --data '{"module_url":"ghcr.io/nethserver/piler:1.3.3-dev.1","instances":["piler1"],"force":true}'

   Check that piler-app runs the new image:

   runagent -m piler1 podman ps --format "{{.Names}} {{.Image}} {{.Status}}"

   Test 1: the real client address is logged

   1. From your PC, open the piler web UI (https://<piler host>/) and log in.

   2. On the node, read the access log:

      journalctl -n 200 --since -5min -o cat SYSLOG_IDENTIFIER=piler-app | grep -E '"(GET|POST) ' | tail

   3. The lines show the IP of your PC, not 127.0.0.1 or the Traefik address. If your PC is on the same network as the node, this is its local IP.

   Test 2: a fake header from the client is not trusted

   1. From your PC, send a request with a fake address:

      curl -sk -o /dev/null -H 'X-Real-IP: 198.51.100.66' https://<piler host>/

   2. Read the log again (same command as test 1).

   3. The line shows the IP of your PC, not 198.51.100.66.

   Test 3: no regression

   • Log in as admin@local and as auditor@local.
   • Search for an archived email and open it.
   • Send an email through the mail server, then find it in piler.

   👍React with 👍1Reacted by Luca Gasparini
9. stephdl

   assigned

   lucagasparini

   and unassigned

   stephdl

   on Oct 30, 2026
10. stephdl

    moved this from In Progress to Testing in NethServeron Oct 30, 2026
11. stephdl

    added

    testingPackages are available from testing repositoriesPackages are available from testing repositories

    on Oct 30, 2026
12. lucagasparini commented on Oct 30, 2026

    

    lucagasparini

    on Oct 30, 2026

    More actions

    Test 1: VERIFIED
    Test 2: VERIFIED
    Test 3: VERIFIED
13. lucagasparini

    added

    verifiedAll test cases were verified successfullyAll test cases were verified successfully

    on Oct 30, 2026
14. github-actions

    removed

    testingPackages are available from testing repositoriesPackages are available from testing repositories

    on Oct 30, 2026
15. nethbot

    moved this from Testing to Verified in NethServeron Oct 30, 2026
16. stephdl commented on Oct 30, 2026

    

    stephdl

    on Oct 30, 2026

    Author

    More actions

    released https://github.com/NethServer/ns8-piler/releases/tag/1.3.3
17. stephdl

    closed this as completedon Oct 30, 2026
18. github-project-automation

    moved this from Verified to Done in NethServeron Oct 30, 2026