diff --git a/packages/api/src/index.ts b/packages/api/src/index.ts
index b49c4bd..bb60b7f 100644
--- a/packages/api/src/index.ts
+++ b/packages/api/src/index.ts
@@ -16,6 +16,9 @@ import { blogRouter } from "./routes/blog";
 
 const app = express();
 
+// Trust Cloudflare proxy (required for express-rate-limit with X-Forwarded-For)
+app.set("trust proxy", 1);
+
 // Middleware
 app.use(helmet({ contentSecurityPolicy: false }));
 app.use(cors());