https://jiwenkang.com/tags/nginx/Recent content in Nginx on Wenkang's BLOGHugozh-cnMon, 26 Oct 2026 00:00:00 +0000https://jiwenkang.com/posts/2026/synology-reverse-proxy-trusted-proxies/Mon, 26 Oct 2026 00:00:00 +0000https://jiwenkang.com/posts/2026/synology-reverse-proxy-trusted-proxies/<p>OpenClaw 网关跑在 <code>192.168.1.244</code> 上，我习惯通过 <code>wenkangnas.local (192.168.1.4)</code> 的反向代理访问它：浏览器打开 <code>https://192.168.1.4:18789/</code>，由 DSM 的反代转给虚拟机里的网关。某天这个页面突然只返回一段 JSON：</p> <div class="highlight"><pre tabindex="0" class="chroma"><code class="language-json" data-lang="json"><span class="line"><span class="cl"><span class="p">{</span><span class="nt">&#34;error&#34;</span><span class="p">:{</span><span class="nt">&#34;message&#34;</span><span class="p">:</span><span class="s2">&#34;Proxy client attribution is required. Configure gateway.trustedProxies narrowly and make the proxy overwrite or safely rebuild forwarded client headers.&#34;</span><span class="p">,</span><span class="nt">&#34;type&#34;</span><span class="p">:</span><span class="s2">&#34;proxy_attribution_required&#34;</span><span class="p">}}</span> </span></span></code></pre></div><p>之前 NAS 侧的 agent 已经&quot;修&quot;过一次——往 <code>gateway.trustedProxies</code> 里加了 <code>192.168.1.4</code>——没用，它自己当时也说&quot;可能不会解决报错&quot;。这次我让 Claude Code 上去看。</p>