diff --git a/roles/web-gw/templates/vhost.j2 b/roles/web-gw/templates/vhost.j2
index 2dbeb42..b73a9a9 100644
--- a/roles/web-gw/templates/vhost.j2
+++ b/roles/web-gw/templates/vhost.j2
@@ -27,10 +27,10 @@ server {
 	}
 	# post 11s
 	location /firmware-11s/experimental {
-			proxy_pass http://home.mephis.to:2342/ff/11s/experimental/images;
+		proxy_pass http://home.mephis.to:2342/ff/11s/experimental/images;
 	}
 	location /firmware-11s/stable {
-			proxy_pass http://home.mephis.to:2342/ff/11s/stable/images;
+		proxy_pass http://home.mephis.to:2342/ff/11s/stable/images;
 	}
 }
 
@@ -38,6 +38,8 @@ server {
 	listen 443 ssl http2;
 	listen [::]:443 ssl http2;
 
+	proxy_set_header X-Forwarded-For $remote_addr;
+
 	server_name {{ ansible_fqdn }};
 
 	ssl_certificate_key /etc/nginx/ssl/{{ ansible_fqdn }}.key;
@@ -52,4 +54,11 @@ server {
 	location /firmware-ng/stable {
 		proxy_pass http://home.mephis.to:2342/ff/stable/images;
 	}
+	# post 11s
+	location /firmware-11s/experimental {
+		proxy_pass http://home.mephis.to:2342/ff/11s/experimental/images;
+	}
+	location /firmware-11s/stable {
+		proxy_pass http://home.mephis.to:2342/ff/11s/stable/images;
+	}
 }