Skip to main content
We are aware of an issue after updating to cPanel versions 11.110.0.65, 11.126.0.21, or 11.128.0.11, some cPanel plugins or features are no longer functioning properly including WP Toolkit. Please see the following article for more information and updates:
Update to latest cPanel 110, 126, or 128 versions removes "addonfeatures" directory.

.htaccess - Nginx as a reverse proxy for Apache

Answered
milo695

Configuring a cPanel/WHM server running AlmaLinux 9 with Nginx as a reverse proxy for Apache. The goal is to enable .htaccess rules for user websites (e.g., blocking access to /wp-admin and /wp-login.php for specific IPs). Despite setting up mod_remoteip, Apache logs still show 127.0.0.1 as the client IP instead of the real client IP.

Was following this guide:
https://support.cpanel.net/hc/en-us/articles/360051107513-How-to-restore-visitors-IP-with-mod-remoteip 

What I did:

  • Enabled mod_remoteip in Apache:

    • Verified mod_remoteip is installed and enabled via EasyApache 4.
    • Configured /etc/apache2/conf.modules.d/370_mod_remoteip.conf:
      apache:
      LoadModule remoteip_module modules/mod_remoteip.so
RemoteIPHeader X-Forwarded-For
RemoteIPTrustedProxy 127.0.0.1
RemoteIPTrustedProxy my_server_IPv4
      RemoteIPTrustedProxy my_server_IPv6
    • Restarted Apache.

  • Updated Apache LogFormat:

    • Adjusted log formats in WHM to include %a for real client IPs: 
      LogFormat (combined): %a %l %u %t \"%r\" %>s %b \"%{Referer}i\" \"%{User-Agent}i\"
      LogFormat (common): %a %l %u %t \"%r\" %>s %b

  • Debugging:

    • Enabled LogLevel remoteip:debug in Apache to monitor mod_remoteip behavior.
    • Verified Apache logs still show 127.0.0.1 in /usr/local/apache/logs/access_log.

I can't solve this one, please help!
Thanks

 

Comments

5 comments

Date Votes
  • cPRex Jurassic Moderator

    Hey there!  In theory, you shouldn't have to do much to get this working.  Could you create a ticket on this one so we can examine the server directly?

    1
  • milo695

    Hm... Rex, I had to open Customer service request, not a Techical one, as it keeps spining suggested answers. Unable to open ticket from WHM, as I'm on Hetzner, not directly purchased from you.
    Here, the ID: #95433562
    Thanks

    0
  • cPRex Jurassic Moderator

    Thanks for that.  In general, you should be opening tickets with the license provider as they are your first point of contact for technical support issues, but I do see our team is checking this now.

    1
  • milo695

    Hey Rex, SOLVED.
    Your buddy Aaron nailed. It looks like I was missing this:

    RemoteIPInternalProxy 127.0.0.1
    0
  • cPRex Jurassic Moderator

    Nice - I'm glad we were able to help!

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post