diff --git a/deploy/nginx.conf b/deploy/nginx.conf
index c56244f..5904789 100644
--- a/deploy/nginx.conf
+++ b/deploy/nginx.conf
@@ -14,8 +14,9 @@ server {
     location /api/ {
         client_max_body_size 256k;
         proxy_pass http://web:8000;
-        # X-Forwarded-For 必传：DRF NUM_PROXIES=1 取末段还原真实客户端 IP
-        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+        # XFF 透传上层（1Panel OpenResty 已追加真实客户端IP），勿再追加自身——
+        # 否则 Django 取末段会拿到 Docker 网关 IP（172.20.x.1），真实IP与地理位置全丢
+        proxy_set_header X-Forwarded-For $http_x_forwarded_for;
         proxy_set_header X-Forwarded-Proto $scheme;
         proxy_set_header Host $host;
     }