Followed Nginx setup instructions but IPs in Jellyfin log still show 127.0.0.1

[visleafs]

Hello,

I am configuring Jellyfin behind Nginx as a reverse proxy. I followed the instructions for setting up from a subdomain, but in my Jellyfin logs all IP addresses are still shown as 127.0.0.1

My Nginx config:

Code:

upstream jellyfin {
  server 127.0.0.1:8096;
}

# Other site configs / https redirect

server {
  # Using port 8443 because my ISP restricts traffic on ports 80 and 443
  listen 8443 ssl;
  listen [::]:8443 ssl;
  http2 on;

  server_name <redacted>;

  ssl_certificate <redacted>;
  ssl_certificate_key <redacted>;
  add_header Strict-Transport-Security 'max-age=63072000' always;

  root <redacted>;
  index 'index.html' 'index.htm';

  client_max_body_size 20M;

  add_header X-Content-Type-Options "nosniff";
  #add_header Permissions-Policy "accelerometer=(), ambient-light-sensor=(), battery=(), bluetooth=(), camera=(), clipboard-read=(), display-capture=(), document-domain=(), encrypted-media=(), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), payment=(), publickey-credentials-get=(), serial=(), sync-xhr=(), usb=(), xr-spatial-tracking=()" always;
  add_header Content-Security-Policy "default-src https: data: blob: ; img-src 'self' https://* ; style-src 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline' https://www.gstatic.com https://www.youtube.com blob:; worker-src 'self' blob:; connect-src 'self'; object-src 'none'; font-src 'self'";
  add_header X-Robots-Tag "noindex, nofollow, nosnippet, noarchive";

  location / {
    proxy_pass http://jellyfin;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Protocol $scheme;
    proxy_set_header X-Forwarded-Host $http_host;

    proxy_buffering off;
  }

  location /socket {
    proxy_pass http://jellyfin;
    proxy_http_version 1.1;
    proxy_set_header Upgrade $http_upgrade;
    proxy_set_header Connection "upgrade";
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Forwarded-Proto $scheme;
    proxy_set_header X-Forwarded-Protocol $scheme;
    proxy_set_header X-Forwarded-Host $http_host;
  }
}

The logs in question:

[theguymadmax]

Did you this part listed on the reverse proxy guide:  "Therefore, the IP address(es) of your reverse proxy must be configured under “Known Proxies” in Jellyfin’s Network settings."

[KimNoSubstitute]

I have the same issue.
I have added the host IP address, 192.168.1.89, in the field for known proxies.

Known proxies
192.168.1.89
Comma separated list of IP addresses or hostnames of known proxies used when connecting to your Jellyfin instance. This is required to make proper use of 'X-Forwarded-For' headers. Requires a reboot after saving.

Nah, I'm not going to reboot my Linux server. Nor should I have to.

From the jellyfin log of my most recent access attempt (purposely failed the login).

[2026-01-24 23:00:51.107 +01:00] [INF] Defined LAN subnets: ["127.0.0.1/8", "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
[2026-01-24 23:00:51.107 +01:00] [INF] Defined LAN exclusions: []
[2026-01-24 23:00:51.107 +01:00] [INF] Used LAN subnets: ["127.0.0.1/8", "10.0.0.0/8", "172.16.0.0/12", "192.168.0.0/16"]
[2026-01-24 23:00:51.108 +01:00] [INF] Filtered interface addresses: ["127.0.0.1", "192.168.1.89"]
[2026-01-24 23:00:51.108 +01:00] [INF] Bind Addresses ["0.0.0.0"]
[2026-01-24 23:00:51.108 +01:00] [INF] Remote IP filter is "Allowlist"
[2026-01-24 23:00:51.108 +01:00] [INF] Filtered subnets: []
[2026-01-24 23:02:23.288 +01:00] [WRN] WS "127.0.0.1" error receiving data: "The remote party closed the WebSocket connection without completing the close handshake."
[2026-01-24 23:02:23.289 +01:00] [INF] WS "127.0.0.1" closed
[2026-01-24 23:04:44.948 +01:00] [INF] Authentication request for "jellyfin" has been denied (IP: "127.0.0.1").
[2026-01-24 23:04:44.948 +01:00] [ERR] Error processing request: "Invalid username or password entered". URL "POST" "/Users/authenticatebyname".