import javax.servlet.http.HttpServletRequest;
import org.apache.commons.lang3.StringUtils;
import org.springframework.beans.factory.annotation.Autowired;
import org.springframework.web.bind.annotation.GetMapping;
import org.springframework.web.bind.annotation.RestController;
import lombok.extern.slf4j.Slf4j;
@Slf4j
@RestController
public class IndexController
{
    @Autowired
    HttpServletRequest request;
    @GetMapping({"/", "/index"})
    public String index()
    {
        return StringUtils.join("client ip: ", getClientIp());
    }
    String[] IP_HEADERS = {"X-Forwarded-For", "X-Real-IP", "Proxy-Client-IP", "WL-Proxy-Client-IP", "HTTP_X_FORWARDED_FOR", "HTTP_X_FORWARDED", "HTTP_X_CLUSTER_CLIENT_IP", "HTTP_CLIENT_IP", "HTTP_FORWARDED_FOR", "HTTP_FORWARDED", "HTTP_VIA", "REMOTE_ADDR"};
    /**
     * 獲取客戶端真實IP地址
     */
    private String getClientIp()
    {
        for (String header : IP_HEADERS)
        {
            String ip = request.getHeader(header);
            if (ip != null && !ip.isEmpty() && !"unknown".equalsIgnoreCase(ip))
            {
                // 處理多個IP的情況（逗號分隔）
                log.info("##### ip header: {}", header);
                String[] ips = ip.split(",");
                return ips[0].trim();
            }
        }
        log.info("##### request.getRemoteAddr");
        return request.getRemoteAddr();
    }
}

├── conf.d
│   └── web.conf
├── docker-compose.yml

services:
  nginx:
    image: nginx:alpine
    container_name: my-nginx
    deploy:
      resources:
        limits:
          cpus: '2.0'
          memory: 10M
        reservations:
          cpus: '2.0'
          memory: 10M
    ports:
    - 8080:80
    links:
    - web:web
    restart: on-failure
    volumes:
    - ./conf.d/:/etc/nginx/conf.d/
    logging:
      driver: json-file
      options:
        max-size: 5m
        max-file: '1'
  web:
    hostname: web
    image: registry.cn-shanghai.aliyuncs.com/00fly/springboot-nginx:1.0.0
    container_name: web
    deploy:
      resources:
        limits:
          cpus: '2.0'
          memory: 200M
        reservations:
          cpus: '2.0'
          memory: 200M
    environment:
      CONTEXT_PATH: /
      #CONTEXT_PATH: /luck
    restart: on-failure
    logging:
      driver: json-file
      options:
        max-size: 5m
        max-file: '1'

server {
    listen 80;
    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
    location / {
        proxy_pass http://web:8080;
        client_max_body_size 5m;
    }
    error_page 500 502 503 504  /50x.html;
        location = /50x.html {
        root /usr/share/nginx/html;
    }
}

[root@00fly docker]# docker ps
CONTAINER ID   IMAGE                                                                 COMMAND                  CREATED         STATUS         PORTS                                       NAMES
ef8e4b3d8269   nginx:alpine                                                          "/docker-entrypoint.…"   5 seconds ago   Up 3 seconds   0.0.0.0:8080->80/tcp, :::8080->80/tcp       my-nginx
5830a2be7439   registry.cn-shanghai.aliyuncs.com/00fly/springboot-nginx:1.0.0        "java -Djava.securit…"   5 seconds ago   Up 4 seconds   8080/tcp                                    web
[root@00fly docker]# docker exec -it my-nginx  sh
nginx -V
nginx version: nginx/1.29.7
built by gcc 15.2.0 (Alpine 15.2.0) 
built with OpenSSL 3.5.5 27 Jan 2026
TLS SNI support enabled
configure arguments: --prefix=/etc/nginx --sbin-path=/usr/sbin/nginx --modules-path=/usr/lib/nginx/modules --conf-path=/etc/nginx/nginx.conf --error-log-path=/var/log/nginx/error.log --http-log-path=/var/log/nginx/access.log --pid-path=/run/nginx.pid --lock-path=/run/nginx.lock --http-client-body-temp-path=/var/cache/nginx/client_temp --http-proxy-temp-path=/var/cache/nginx/proxy_temp --http-fastcgi-temp-path=/var/cache/nginx/fastcgi_temp --http-uwsgi-temp-path=/var/cache/nginx/uwsgi_temp --http-scgi-temp-path=/var/cache/nginx/scgi_temp --with-perl_modules_path=/usr/lib/perl5/vendor_perl --user=nginx --group=nginx --with-compat --with-file-aio --with-threads --with-http_addition_module --with-http_auth_request_module --with-http_dav_module --with-http_flv_module --with-http_gunzip_module --with-http_gzip_static_module --with-http_mp4_module --with-http_random_index_module --with-http_realip_module --with-http_secure_link_module --with-http_slice_module --with-http_ssl_module --with-http_stub_status_module --with-http_sub_module --with-http_v2_module --with-http_v3_module --with-mail --with-mail_ssl_module --with-stream --with-stream_realip_module --with-stream_ssl_module --with-stream_ssl_preread_module --with-cc-opt='-Os -fstack-clash-protection -Wformat -Werror=format-security -fno-plt -g' --with-ld-opt='-Wl,--as-needed,-O1,--sort-common -Wl,-z,pack-relative-relocs'

    proxy_set_header Host $host;
    proxy_set_header X-Real-IP $remote_addr;
    proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;

 docker-compose --compatibility up -d