Support intro
Sorry to hear you’re facing problems 
help.nextcloud.com is for home/non-enterprise users. If you’re running a business, paid support can be accessed via portal.nextcloud.com where we can ensure your business keeps running smoothly.
In order to help you as quickly as possible, before clicking Create Topic please provide as much of the below as you can. Feel free to use a pastebin service for logs, otherwise either indent short log examples with four spaces:
example
Or for longer, use three backticks above and below the code snippet:
longer
example
here
Some or all of the below information will be requested if it isn’t supplied; for fastest response please provide as much as you can 
Nextcloud version (eg, 20.0.5): 23.0.2
Operating system and version (eg, Ubuntu 20.04): Ubuntu 20.04
Apache or nginx version (eg, Apache 2.4.25): 2.4.41
PHP version (eg, 7.4): 8.0
The issue you are facing:
Audit.log and nextcloud.log show the ip address of my router for every client that logs in from my lan. I would like themn to show the actual local ip address of the client. Note that the logs record the correct external IP when accessing from outside the LAN.
I worry that if someone enters a bad password from a LAN client, then all LAN clients will be throttled by brute force protection rather than just the one offending client.
Is this the first time you’ve seen this error? (Y/N):
N
Steps to replicate it:
- Log in to nextcloud from a client on the LAN
- Inspect the audit.log
The output of your Nextcloud log in Admin > Logging:
{"reqId":"z8ZF7tMy0Ddzh0BwvbFn","level":1,"time":"2022-03-02T14:25:18+00:00","remoteAddr":"192.168.1.254","user":"admin","app":"no app in context","method":"GET","url":"/index.php/settings/ajax/checksetup","message":"Deprecated event type for OCP\\IDBConnection::CHECK_MISSING_COLUMNS: Symfony\\Component\\EventDispatcher\\GenericEvent is used","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:97.0) Gecko/20100101 Firefox/97.0","version":"23.0.2.1"}
The output of your config.php file in /path/to/nextcloud (make sure you remove any identifiable information!):
<?php
$CONFIG = array (
'instanceid' => 'stuff',
'trusted_domains' =>
array (
0 => '192.168.1.19',
1 => 'cloud.example.com',
2 => 'cloud.lan.example.com',
),
'passwordsalt' => 'stuffhere',
'secret' => 'secretstuff',
'datadirectory' => '/mnt/cloud/data',
'dbtype' => 'mysql',
'version' => '23.0.2.1',
'overwrite.cli.url' => 'http://192.168.1.19',
'dbname' => 'dbnamehere',
'dbhost' => 'localhost:3306',
'dbport' => '',
'dbtableprefix' => 'oc_',
'mysql.utf8mb4' => true,
'dbuser' => 'userhere',
'dbpassword' => 'passwordhere',
'installed' => true,
'ldapProviderFactory' => 'OCA\\User_LDAP\\LDAPProviderFactory',
'updater.secret' => 'stuffhere',
'maintenance' => false,
'theme' => '',
'loglevel' => 1,
'trusted_proxies' =>
array (
1 => '127.0.0.1',
),
'default_phone_region' => 'GB',
'filelocking.enabled' => true,
'memcache.local' => '\\OC\\Memcache\\APCu',
'memcache.locking' => '\\OC\\Memcache\\Redis',
'redis' =>
array (
'host' => '127.0.0.1',
'port' => 6379,
),
'overwriteprotocol' => 'https',
'overwritehost' => 'cloud.example.com',
);
The output of your Apache/nginx/system log in /var/log/____:
192.168.1.254 - - [02/Mar/2022:14:34:03 +0000] "PUT /index.php/apps/user_status/heartbeat HTTP/1.1" 200 1326 "-" ">
192.168.1.254 - - [02/Mar/2022:14:34:05 +0000] "GET /ocs/v2.php/apps/notifications/api/v2/notifications HTTP/1.1" >