nginx反代报403 CSRF问题

   location / {
    #proxy_set_header Host $host;
      add_header Strict-Transport-Security "max-age=31536000; includeSubDomains" always; #防止https伪装攻击
      proxy_pass http://172.16.31.28;
      proxy_set_header X-Forwarded-Host $server_name;
      proxy_set_header X-Real-IP $remote_addr;
      proxy_set_header X-Forwarded-Proto $scheme;
   }