Marc-André Bombeck d87718407e fix(http): let operators name their proxy, and survive a bad TRUST_PROXY_HOPS ...

Forwarding headers were believed from any connection on a private address.
Behind Docker Desktop, OrbStack and docker-proxy every connection to a
published port arrives from the gateway, a private address, so a caller
reaching the port directly could again choose the client address that rate
limits, the audit log and sign-in notices record. TRUSTED_PROXY_CIDRS
(comma-separated CIDRs) now names the proxies: when set, only those peers may
report a client address. The private-range default stays when it is unset,
the boot log states the rule in force in one line, and the reverse-proxy
guide says what to set for a proxy on the same host, on a Docker network, or
on a public address (which, unlisted, puts all clients in one bucket).

An invalid TRUST_PROXY_HOPS threw on every request that resolved the client
address, so every route answered 500, the health probe included. It now
resolves no address, warns once, and is named at boot.

2026-10-25 17:44:31 +01:00

..

__tests__

fix(http): refuse state changes a browser sends from another site

2026-10-25 13:52:04 +01:00

cache-headers.ts

v1.4.34 — apple-health import + reliability + web-freeze

2026-05-16 21:25:26 +02:00

cross-site-guard.ts

fix(http): exempt only a Bearer request without a session cookie from the cross-site check

2026-10-25 17:44:31 +01:00

deprecation.ts

fix(api): read a deprecation day through the date-only helper

2026-10-20 13:57:50 +02:00

list-query-fields.ts

fix(api): one helper for list pages, exact cut signal, total order

2026-10-20 13:29:14 +02:00

list-query.ts

refactor(api): drop the list query re-exports nothing imports

2026-10-20 14:17:36 +02:00

peer-address.ts

fix(http): read forwarding headers only from a connection a proxy could make

2026-10-25 13:52:04 +01:00

prefer.ts

feat(cycle): name the start a period start folds in and the starts a removal gives back

2026-10-15 23:16:11 +02:00

proxy-bypass-routes.ts

feat(import): import lab results and medications from CSV

2026-10-21 22:17:59 +02:00

proxy-trust.ts

fix(http): let operators name their proxy, and survive a bad TRUST_PROXY_HOPS

2026-10-25 17:44:31 +01:00

read-capped.ts

style: apply prettier 3.9.1 formatting

2026-06-28 19:26:16 +02:00

relative-redirect.ts

Stop redirecting to the address the process bound to

2026-08-22 10:55:40 +02:00

request-id.ts

fix(http): mint the fresh request id through randomId

2026-10-15 21:31:50 +02:00

retired-routes.ts

refactor(settings): remove the preview-feature opt-ins

2026-10-25 00:44:15 +02:00