cproudlock eed947b207 Forward real client IPs through waitress trusted-proxy flags ...

The X-Forwarded-For rewrite rule alone is not enough: waitress 2+
strips forwarded headers from untrusted proxies by default, so the app
still saw 127.0.0.1 with the rule active. Trust the loopback proxy and
consume x-forwarded-for on the waitress command line; waitress then
rewrites remote_addr to the real client. Runbook gains the
allowedServerVariables unlock (500.52) and both troubleshooting rows.

2026-07-16 15:27:45 -04:00

3.4 KiB

Raw Blame History

View Raw