GeoIP issue in matomo image

[abdulazizasiri]

I have a problem.

I have 3 images.

1- Matomo:5.2.0

2- MariaDB:latest

3- Nginx:latest

This is the docker-compose:

`services:
matomoDb:
image: mariadb:latest
command: --max-allowed-packet=64MB
restart: always
ports:
- "3306:3306"
volumes:
- matomoDb:/var/lib/mysql:Z
env_file:
- db.env
networks:
- custom_network

matomo:
build:
context: .
dockerfile: Dockerfile
image: matomo-geoip:latest
restart: always
links:
- matomoDb
volumes:
- matomo:/var/www/html:z
networks:
- custom_network

matomoWeb:
image: nginx:latest
restart: always
volumes:
- matomo:/var/www/html:z,ro
- ./default.conf:/etc/nginx/conf.d/default.conf:z
ports:
- "8082:80"
networks:
- custom_network # Custom network for communication with other services

volumes:
matomoDb:
matomo:

networks:
custom_network:
driver: bridge`

This is default.conf

`
upstream backend {
server matomo:9000; # Ensure the port is specified here
}

server {
listen 80;
root /var/www/html/;
index index.php index.html index.htm;

# Forward the real client IP and other necessary headers
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;

location / {
    try_files $uri $uri/ =404;
}

location ~ \.php$ {
    fastcgi_pass backend;
    include fastcgi_params;
    fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;

    # Forward client IP and real IP
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header Host $host;
}

error_page 404 /404.html;
error_page 500 502 503 504 /50x.html;

location = /50x.html {
    root /usr/share/nginx/html;
}

}
`

After I set matomo up in the admin page, I go to
Settings → System → Geolocation, then I download the GeoIP 2 database.

and then I choose the

DBIP - GeoIp 2 (php) and save

I get the wrong IP address when GeoIP resolves it. The IP I get is the container IP address.

How do I fix this?

Thank you all.

[samtux]

The following setup successfully captured real IPs in matomo.conf

resolver 127.0.0.11 valid=2s;
upstream php-handler {
    zone backends 64k;
    server app:9000 resolve;
}

server {
    listen [::]:80; 
    listen 80;

    # Set Real IP
    set_real_ip_from 0.0.0.0/0;
    real_ip_header X-Forwarded-For;
    real_ip_recursive on;

    add_header Referrer-Policy origin always;
    add_header X-Content-Type-Options "nosniff" always;
    add_header X-XSS-Protection "1; mode=block" always;

    root /var/www/html;

    index index.php;

    location ~ ^/(index|matomo|piwik|js/index|plugins/HeatmapSessionRecording/configs)\.php$ {
        include fastcgi_params; # if your Nginx setup doesn't come with a default fastcgi-php config, you can fetch it from https://github.com/nginx/nginx/blob/master/conf/fastcgi.conf
        try_files $fastcgi_script_name =404; # protects against CVE-2019-11043. If this line is already included in your snippets/fastcgi-php.conf you can comment it here.
        fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
        fastcgi_param PATH_INFO $fastcgi_path_info;
        fastcgi_param HTTP_PROXY ""; # prohibit httpoxy: https://httpoxy.org/
        
        # Set IP Real in PHP
        fastcgi_param HTTP_X_FORWARDED_FOR $proxy_add_x_forwarded_for;
        fastcgi_param HTTP_X_REAL_IP $remote_addr;
        fastcgi_param REMOTE_ADDR $remote_addr;
        
        fastcgi_pass php-handler;
    }

    ## deny access to all other .php files
    location ~* ^.+\.php$ {
        deny all;
        return 403;
    }

    ## serve all other files normally
    location / {
        try_files $uri $uri/ =404;
    }

    ## disable all access to the following directories
    location ~ ^/(config|tmp|core|lang) {
        deny all;
        return 403; # replace with 404 to not show these directories exist
    }

    location ~ /\.ht {
        deny all;
        return 403;
    }

    location ~ js/container_.*_preview\.js$ {
        expires off;
        add_header Cache-Control 'private, no-cache, no-store';
    }

    location ~ \.(gif|ico|jpg|png|svg|js|css|htm|html|mp3|mp4|wav|ogg|avi|ttf|eot|woff|woff2)$ {
        allow all;
        ## Cache images,CSS,JS and webfonts for an hour
        ## Increasing the duration may improve the load-time, but may cause old files to show after an Matomo upgrade
        expires 1h;
        add_header Pragma public;
        add_header Cache-Control "public";
    }

    location ~ ^/(libs|vendor|plugins|misc|node_modules) {
        deny all;
        return 403;
    }

    ## properly display textfiles in root directory
    location ~/(.*\.md|LEGALNOTICE|LICENSE) {
        default_type text/plain;
    }
}
# vim: filetype=nginx