Webadmin behind NGINX original IP

Hi, I've had a look around and cant seem to find anyone with the same issue.

I run Sophos UTM at home and NGINX reverse proxy.

I have a few web services behind the proxy and when connected from external these services display the correct IP address that i am connecting from. However with Sophos it only shows the NGINX IP address even if i am connected externally. So for failed login attempts it shows it coming from NGINX IP and not the originating external IP.

in NGINX i have this set however it doesnt seem to do anything (although works for my other services)

proxy_set_header X-Real-IP $remote_addr;
proxy_set_header Host $host;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;