Add the following configuration section to /var/www/matomo/config/config.ini.php
exclude includes localhost by default. Add hostnames, IP and/or CIDR formatted subnets in a comma-separated list format.Username and Password are optional, leave blank to disable[proxy]
host = "http://forward-proxy.int.78z.us"
port = 3128
exclude = ""
username = ""
password = ""
Modify /var/www/matomo/config/config.ini.php to enable the use of a reverse proxy
force_ssl = 1
assume_secure_protocol = 1
proxy_client_headers[] = HTTP_X_FORWARDED_FOR
proxy_host_headers[] = HTTP_X_FORWARDED_HOST
proxy_ips[] = 10.1.6.4/32
Note: This file is automatically modified each time the GUI Settings page is saved. Any manual config lines shouldn't be lost, likely re-arranged though.
Add the FQDN that will be used for external access to Administration → System → General settings → Trusted Matomo Hostname