From cac812665ca5c20e4e6a39ee27985917a98c8dce Mon Sep 17 00:00:00 2001
From: Siavash Sameni <manwe@MacBook-Air.local>
Date: Mon, 30 Mar 2026 11:12:57 +0400
Subject: [PATCH] fix: Caddyfile adds X-Real-IP header + trusted_proxies config

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
---
 warzone/deploy/docker/Caddyfile | 7 ++++++-
 1 file changed, 6 insertions(+), 1 deletion(-)

diff --git a/warzone/deploy/docker/Caddyfile b/warzone/deploy/docker/Caddyfile
index 286f592..9ea467d 100644
--- a/warzone/deploy/docker/Caddyfile
+++ b/warzone/deploy/docker/Caddyfile
@@ -1,6 +1,9 @@
 {
 	# Global ACME settings
 	email admin@manko.yoga
+	servers {
+		trusted_proxies static private_ranges
+	}
 }
 
 voip.manko.yoga {
@@ -17,5 +20,7 @@ voip.manko.yoga {
 
 	# Everything else → featherChat server
 	# Web UI (/), API (/v1/*), WebSocket (/v1/ws/*)
-	reverse_proxy warzone-server:7700
+	reverse_proxy warzone-server:7700 {
+		header_up X-Real-IP {remote_host}
+	}
 }