H3-Fix: TRUST_PROXY konfigurierbar (H3: Rate-Limit-Bypass hinter Proxy geloest)

2026-09-10 17:07:14 +02:00
parent ad6983a49d
commit d43d1a3f34
3 changed files with 16 additions and 2 deletions
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -24,6 +24,8 @@ services:
      - SESSION_SECRET=${SESSION_SECRET:-}
      - CORS_ORIGIN=${CORS_ORIGIN:-http://localhost:5000}
      - NODE_ENV=${NODE_ENV:-production}
+      # H3: Proxy-Header vertrauen (true hinter HAProxy/Nginx, false bei direktem Zugriff)
+      - TRUST_PROXY=${TRUST_PROXY:-true}
      # Punkt 4: PostgreSQL (auto-started)
      - DATABASE_URL=postgresql://${POSTGRES_USER:-workflow}:${POSTGRES_PASSWORD:-workflow}@db:5432/${POSTGRES_DB:-workflow}
      # Punkt 9: Session-Limitierung