🐛 Bug Report: Session object store incorrect info

[usamashafiqs]

👟 Reproduction steps

Session showing me my host server IP and Location instead of logged in user.

👍 Expected behavior

Session should show logged in user IP and Location.

👎 Actual Behavior

Session showing me my server IP and Location instead of logged in user.

🎲 Appwrite version

Version 1.1.x

💻 Operating system

Linux

🧱 Your Environment

No response

👀 Have you spent some time to check if this issue has been raised before?

• I checked and didn't find similar issue

🏢 Have you read the Code of Conduct?

• I have read the Code of Conduct

[stnguyen90]

@usamashafiqs thanks for raising this issue! 🙏🏼 Do you have a reverse proxy in front of Appwrite?

[usamashafiqs]

I did not have any reverse proxy in front of Appwrite. But appwrite already have traefik as reverse proxy.

[stnguyen90]

But appwrite already have traefik as reverse proxy.

Traefik should be fine and shouldn't interfere with the IP address that is collected.

Do you have anything else running on the server? Do you have anything else in front of Appwrite? Any other information you can provide about your infrastructure/architecture?

[usamashafiqs]

Only appwrite instance is running on server.
=> Cloudflare dns
=> Ubuntu 22.04.1 LTS
=> Docker
=> Appwrite

[stnguyen90]

The problem could be Cloudflare proxy. Since the request some from Cloudflare proxy, Appwrite uses that as the source IP address. In order to get Appwrite to use the IP address before Cloudflare, you'll have to tell Appwrite to trust Cloudflare and use the IP passed in the header using the forwardedHeaders option.

I would recommend creating a docker-compose.override.yml file in the same folder as your Appwrite docker-compose.yml file if you haven't already and adding this:

services:
  traefik:
    command:
      - --providers.file.directory=/storage/config
      - --providers.file.watch=true
      - --providers.docker=true
      - --providers.docker.exposedByDefault=false
      - --providers.docker.constraints=Label(`traefik.constraint-label-stack`,`appwrite`)
      - --entrypoints.appwrite_web.address=:80
      - --entrypoints.appwrite_websecure.address=:443
      - --entrypoints.appwrite_web.forwardedHeaders.trustedIPs=<IP Address of Cloudflare>
      - --entrypoints.appwrite_websecure.forwardedHeaders.trustedIPs=<IP Address of Cloudflare>

The list of Cloudflare IP Addresses can be found here.

After creating this file, run docker compose up -d to apply the changes.

Alternatively, you can trust all IPs by putting this instead of the trustedIPs:

      - --entrypoints.appwrite_web.forwardedHeaders.insecure
      - --entrypoints.appwrite_websecure.forwardedHeaders.insecure

[usamashafiqs]

@stnguyen90 thanks! It worked.