use http_realip module to enable X-forwarded headers proprerly