NGINX Ingress Controller is the source of all traffic in NGINX logs

[kierenevans]

We need to enable the realip module and filter X-Forwarded-For to remove the NGINX ingress controller pod's IP.

Alternatively we might be able to get the NGINX Ingress controller to forward the real IP directly, though if varnish is in the middle we have the same problem.

Might make sense to have this configurable via attributes.

This will ensure applications know the client's IP address for fraud checks, etc.