fix: resolve webhook client IP behind proxies

2026-06-08 11:25:02 +03:00
parent 23ad893f69
commit c2f0ae0b8b
21 changed files with 161 additions and 25 deletions
@@ -8,12 +8,15 @@
 {$WEBHOOK_HOST} {
 	encode zstd gzip

+	# Caddy sets X-Forwarded-For/Host/Proto for reverse_proxy by default.
+	# The backend uses X-Forwarded-For for payment provider IP allowlists.
 	reverse_proxy backend:8080
 }

 {$MINIAPP_HOST} {
 	encode zstd gzip

+	# Keep forwarded headers for Web App URL generation and request logging.
 	reverse_proxy frontend:80
 }