diff --git a/templates/tomcat-server.xml.j2 b/templates/tomcat-server.xml.j2
index 9dc83aa..f32f020 100644
--- a/templates/tomcat-server.xml.j2
+++ b/templates/tomcat-server.xml.j2
@@ -126,6 +126,16 @@
     -->
     <Engine name="Catalina" defaultHost="localhost">
 
+{% if tomcat_ajp_enabled %}
+      <!-- Automatically substitutes the IP with the one contained
+             in the x-forwarded-for header if that header is set -->
+           <Valve className="org.apache.catalina.valves.RemoteIpValve"
+                  remoteIpHeader="X-Forwarded-For"
+                  protocolHeader="X-Forwarded-Proto"
+                  protocolHeaderHttpsValue="https"
+                  />
+{% endif %}
+
       <!--For clustering, please take a look at documentation at:
           /docs/cluster-howto.html  (simple how to)
           /docs/config/cluster.html (reference documentation) -->
@@ -154,9 +164,6 @@
         -->
 
 {% if tomcat_access_log_enabled %}
-        <!-- Automatically substitutes the IP with the one contained
-             in the x-forwarded-for header if that header is set -->
-        <Valve className="org.apache.catalina.valves.RemoteIpValve" />
         <!-- Access log processes all example.
              Documentation at: /docs/config/valve.html
              Note: The pattern used is equivalent to using pattern="combined" -->