services.matrix-authentication-service.settings.http.trusted_proxies

MAS can infer the client IP address from the X-Forwarded-For header. It will trust the value for this header only if the request comes from a trusted reverse proxy listed here.