Skip to content

Commit 8891604

Browse files
committed
docs: enhance TRUST_PROXY section in subscription page documentation
1 parent d4510b6 commit 8891604

2 files changed

Lines changed: 4 additions & 0 deletions

File tree

docs/install/subscription-page/bundled.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -100,6 +100,8 @@ TRUST_PROXY=1
100100

101101
</details>
102102

103+
### About `TRUST_PROXY` {#trust-proxy}
104+
103105
:::info About `TRUST_PROXY`
104106

105107
The subscription page runs behind a reverse proxy (Caddy / Nginx), so the client connects to the proxy, not directly to the app. To know the **real** client IP, the app reads the `X-Forwarded-For` header – but that header can be spoofed by the client unless the app is told which hops to trust.

docs/install/subscription-page/separate-server.md

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -130,6 +130,8 @@ TRUST_PROXY=1
130130

131131
</details>
132132

133+
### About `TRUST_PROXY` {#trust-proxy}
134+
133135
:::info About `TRUST_PROXY`
134136

135137
The subscription page runs behind a reverse proxy (Caddy / Nginx), so the client connects to the proxy, not directly to the app. To know the **real** client IP, the app reads the `X-Forwarded-For` header – but that header can be spoofed by the client unless the app is told which hops to trust.

0 commit comments

Comments
 (0)