diff --git a/k8s-deployment.yaml b/k8s-deployment.yaml
index 773376b..492ac27 100644
--- a/k8s-deployment.yaml
+++ b/k8s-deployment.yaml
@@ -64,6 +64,7 @@ metadata:
   labels:
     app: proxy-detection-api
 spec:
+  externalTrafficPolicy: Local  # Important for real IP
   selector:
     app: proxy-detection-api
   ports:
diff --git a/k8s-ingress.yaml b/k8s-ingress.yaml
index 6786e3e..a0768fd 100644
--- a/k8s-ingress.yaml
+++ b/k8s-ingress.yaml
@@ -6,7 +6,10 @@ metadata:
     cert-manager.io/cluster-issuer: letsencrypt-prod
     nginx.ingress.kubernetes.io/ssl-redirect: "true"
     nginx.ingress.kubernetes.io/force-ssl-redirect: "true"
-
+    nginx.ingress.kubernetes.io/use-real-ip: "true"
+    nginx.ingress.kubernetes.io/real-ip-header: "X-Forwarded-For"
+    nginx.ingress.kubernetes.io/forwarded-for-header: "X-Forwarded-For"
+    nginx.ingress.kubernetes.io/proxy-real-ip-cidr: "0.0.0.0/0"
   labels:
     app: proxy-detection-api
 spec: