That's not a noob question.
What you should do is add "HideProxy = <ip-address of proxy>" to the configuration of the Hiawatha webserver which is behind the reverse proxy. With this option, Hiawatha takes the IP-address from the X-Forwarded-For HTTP header and pretends the request came from that IP address.