From 13f95ee895c433acba605ac93181b930ad195842 Mon Sep 17 00:00:00 2001
From: Tyler <tyler@auroradev.org>
Date: Wed, 30 Mar 2022 22:58:15 -0400
Subject: [PATCH] Allow real IP from loopback AND private

---
 middleware.go | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/middleware.go b/middleware.go
index 3412882..3d08b00 100644
--- a/middleware.go
+++ b/middleware.go
@@ -29,7 +29,9 @@ func RealIPMiddleware(f http.Handler) http.Handler {
 			return
 		}
 
-		if !net.ParseIP(host).IsPrivate() {
+		netIP := net.ParseIP(host)
+
+		if !netIP.IsLoopback() && !netIP.IsPrivate() {
 			f.ServeHTTP(w, r)
 			return
 		}