Try using the header directly

hmdooris/__main__.py

@@ -98,7 +98,7 @@ def not_authorized(error):
         groups = request.session[auth.sess_attr]['groups']
     return {
         'user': auth.my_username,
-        'ip': request.remote_route,
+        'ip': request.get_header('x-forwarded-for', request.remote_addr),
         'error': error,
         'code': code,
         'msg': msg,