diff --git a/src/runtime/entries/deno-deploy.ts b/src/runtime/entries/deno-deploy.ts
index a31ed807c0..c23d34d390 100644
--- a/src/runtime/entries/deno-deploy.ts
+++ b/src/runtime/entries/deno-deploy.ts
@@ -2,14 +2,35 @@ import "#internal/nitro/virtual/polyfill";
 // @ts-ignore
 import { nitroApp } from "../app";
 
+// https://deno.land/api?s=Deno.ServeHandlerInfo
+type ServeHandlerInfo = {
+  remoteAddr: {
+    transport: "tcp" | "udp";
+    hostname: string;
+    port: number;
+  };
+};
+
 // @ts-expect-error unknown global Deno
-Deno.serve((request: Request) => {
-  return handleRequest(request);
+Deno.serve((request, info) => {
+  return handleRequest(request, info);
 });
 
-async function handleRequest(request: Request) {
+async function handleRequest(request: Request, info: ServeHandlerInfo) {
   const url = new URL(request.url);
 
+  const headers = new Headers(request.headers);
+
+  // Add client IP address to headers
+  // (rightmost is most trustable)
+  headers.append("x-forwarded-for", info.remoteAddr.hostname);
+
+  // There is currently no way to know if the request was made over HTTP or HTTPS
+  // Deno deploy force redirects to HTTPS so we assume HTTPS by default
+  if (!headers.has("x-forwarded-proto")) {
+    headers.set("x-forwarded-proto", "https");
+  }
+
   // https://deno.land/api?s=Body
   let body;
   if (request.body) {
@@ -19,7 +40,7 @@ async function handleRequest(request: Request) {
   return nitroApp.localFetch(url.pathname + url.search, {
     host: url.hostname,
     protocol: url.protocol,
-    headers: request.headers,
+    headers,
     method: request.method,
     redirect: request.redirect,
     body,