Prevent cross-address login lockouts (Refs #63)

2026-10-17 10:55:28 -04:00
parent f3b9699317
commit 4501eba873
14 changed files with 922 additions and 61 deletions
@@ -17,6 +17,9 @@ services:
            EC_TELEMETRY_TOKEN: ${EC_TELEMETRY_TOKEN:-}
            EC_BANK_MAX_BALANCE: ${EC_BANK_MAX_BALANCE:-250000}
            EC_AUTH_ALLOW_HTTP: ${EC_AUTH_ALLOW_HTTP:-false}
+            # Enable only behind a trusted proxy that sets the client-address header.
+            ADDRESS_HEADER: ${ADDRESS_HEADER:-}
+            XFF_DEPTH: ${XFF_DEPTH:-1}
            # Legacy host imports stream whole game files; buffering routes enforce their own caps.
            BODY_SIZE_LIMIT: 'Infinity'
            DB_PATH: /data/cherry.db