From b9c54f1ff5c1815c5773d83b5936c2a30be83657 Mon Sep 17 00:00:00 2001 From: Pasha Sviderski Date: Mon, 13 Jul 2026 15:16:20 +1000 Subject: [PATCH] chore(website): configure ingress Caddy as trusted proxy to forward client IPs --- website/Caddyfile | 5 +++++ 1 file changed, 5 insertions(+) diff --git a/website/Caddyfile b/website/Caddyfile index 48696fc9..10bedcde 100644 --- a/website/Caddyfile +++ b/website/Caddyfile @@ -1,5 +1,10 @@ { admin off + servers { + # Trust the Uncloud ingress Caddy (cluster network) so the X-Forwarded-For chain it forwards + # is preserved and the real client IP is logged in the client_ip field. + trusted_proxies static 10.210.0.0/16 + } } :8000 {