diff --git a/ansible/roles/headscale/files/nginx.conf b/ansible/roles/headscale/files/nginx.conf
index 4b9ef7e..66231aa 100644
--- a/ansible/roles/headscale/files/nginx.conf
+++ b/ansible/roles/headscale/files/nginx.conf
@@ -13,6 +13,10 @@ server {
     ssl_trusted_certificate /etc/letsencrypt/live/headscale.jakehoward.tech/chain.pem;
     include includes/ssl.conf;
 
+    real_ip_header proxy_protocol;
+
+    set_real_ip_from 127.0.0.1;
+
     location / {
         proxy_pass http://localhost:8416;
     }