From b51bf0d094dc82aa450b055c94286e720f48e45c Mon Sep 17 00:00:00 2001 From: Zsolt Tasnadi Date: Tue, 25 Aug 2026 14:57:08 +0200 Subject: [PATCH] X-Forwarded-For fix --- apps/api/config/application.rb | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/apps/api/config/application.rb b/apps/api/config/application.rb index 3b0cd57..e898c47 100644 --- a/apps/api/config/application.rb +++ b/apps/api/config/application.rb @@ -24,6 +24,11 @@ module Api config.action_controller.forgery_protection_origin_check = false + config.action_dispatch.trusted_proxies = ActionDispatch::RemoteIp::TRUSTED_PROXIES + [ + IPAddr.new("172.16.0.0/12"), + IPAddr.new("10.0.0.0/8") + ] + config.autoload_lib(ignore: %w[assets tasks]) config.x.site_url = ENV.fetch("SITE_URL", "https://teletypegames.org")