stroblmeandClaude Opus 5.5 8cfe5c4e6e Count per-address limits on the hop a trusted proxy added; limit signup ...

The limits read the leftmost X-Forwarded-For entry, which the client writes,
and the LAN nginx appended to it. The address now comes from uvicorn's
proxy-headers middleware (rightmost hop not in FORWARDED_ALLOW_IPS), applied
in the app too so tunnel-replayed calls resolve the same way; nginx sets the
header to $remote_addr and the compose backend trusts the Docker networks.
/users/signup gets a per-address limit of 10 an hour.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_013GAeg4Jo6xjZzjwy9QDWMQ

2026-10-06 12:15:58 +02:00

..

configuration.md

Count per-address limits on the hop a trusted proxy added; limit signup

2026-10-06 12:15:58 +02:00

connector-contract.md

Push a frame instead of storing and fetching it

2026-09-02 10:15:14 +02:00

node-types.md

Make changing engine-run code superuser-only

2026-10-06 11:36:30 +02:00

payload-types.md

Document the icon and colour names a forecast can carry

2026-10-05 18:57:58 +02:00