H3-Fix: TRUST_PROXY konfigurierbar (H3: Rate-Limit-Bypass hinter Proxy geloest)

docker-compose.stack.yml

@@ -37,6 +37,8 @@ services:
       - UPLOAD_MAX_MB=${UPLOAD_MAX_MB:-10}
       - CORS_ORIGIN=${CORS_ORIGIN:-http://localhost:3900}
       - NODE_ENV=${NODE_ENV:-production}
+      # H3: Proxy-Header vertrauen (true hinter HAProxy/Nginx, false bei direktem Zugriff)
+      - TRUST_PROXY=${TRUST_PROXY:-true}
       - DATABASE_URL=postgresql://${POSTGRES_USER:-workflow}:${POSTGRES_PASSWORD:-workflow}@db:5432/${POSTGRES_DB:-workflow}
       - SESSION_MAX_PER_USER=${SESSION_MAX_PER_USER:-5}
       - SESSION_TTL_HOURS=${SESSION_TTL_HOURS:-168}