Merge pull request 'Fixed serverTransport logic' (#69) from fix-servertransport into main

Reviewed-on: #69

preprod/forward-to-legacy-nginx.yaml

@@ -13,10 +13,16 @@ tcp:
       entryPoints:
         - "https"
 
+  serversTransports:
+    nginx-legacy-transport-secure:
+      proxyProtocol:
+        version: 2
+
   services:
     # Service defining the external IP
     nginx-legacy-service-secure:
       loadBalancer:
+        serversTransport: nginx-legacy-transport-secure
         servers:
           # This is the actual external IP and Port of your Nginx
           - address: "webserver:443"

prod/forward-to-legacy-nginx.yaml

@@ -13,10 +13,16 @@ tcp:
       entryPoints:
         - "https"
 
+  serversTransports:
+    nginx-legacy-transport-secure:
+      proxyProtocol:
+        version: 2
+
   services:
     # Service defining the external IP
     nginx-legacy-service-secure:
       loadBalancer:
+        serversTransport: nginx-legacy-transport-secure
         servers:
           # This is the actual external IP and Port of your Nginx
           - address: "webserver:443"

tests/mock_nginx/legacy.conf

@@ -5,6 +5,9 @@ http {
         listen 80;
         server_name _;
 
+        real_ip_header X-Forwarded-For;
+        set_real_ip_from 0.0.0.0/0;
+
         location / {
             add_header X-Mock-Service "legacy";
             return 200 "Mock Nginx Legacy HTTP\n";
@@ -12,9 +15,12 @@ http {
     }
 
     server {
-        listen 443 ssl;
+        listen 443 ssl proxy_protocol;
         server_name _;
 
+        real_ip_header proxy_protocol;
+        set_real_ip_from 0.0.0.0/0;
+
         ssl_certificate /etc/nginx/certs/server.crt;
         ssl_certificate_key /etc/nginx/certs/server.key;