diff --git a/apps/api/config/application.rb b/apps/api/config/application.rb
index 3b0cd57..e898c47 100644
--- a/apps/api/config/application.rb
+++ b/apps/api/config/application.rb
@@ -24,6 +24,11 @@ module Api
 
     config.action_controller.forgery_protection_origin_check = false
 
+    config.action_dispatch.trusted_proxies = ActionDispatch::RemoteIp::TRUSTED_PROXIES + [
+      IPAddr.new("172.16.0.0/12"),
+      IPAddr.new("10.0.0.0/8")
+    ]
+
     config.autoload_lib(ignore: %w[assets tasks])
 
     config.x.site_url             = ENV.fetch("SITE_URL", "https://teletypegames.org")