From 891bd018a8cfb72db0d90f14004c2a887c73baa6 Mon Sep 17 00:00:00 2001 From: Rene Fichtmueller Date: Mon, 30 Mar 2026 06:41:36 +0200 Subject: [PATCH] =?UTF-8?q?fix:=20add=20trust=20proxy=20for=20Cloudflare?= =?UTF-8?q?=20=E2=80=94=20fixes=20ERR=5FERL=5FUNEXPECTED=5FX=5FFORWARDED?= =?UTF-8?q?=5FFOR=20in=20rate=20limiter?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- packages/api/src/index.ts | 3 +++ 1 file changed, 3 insertions(+) diff --git a/packages/api/src/index.ts b/packages/api/src/index.ts index b49c4bd..bb60b7f 100644 --- a/packages/api/src/index.ts +++ b/packages/api/src/index.ts @@ -16,6 +16,9 @@ import { blogRouter } from "./routes/blog"; const app = express(); +// Trust Cloudflare proxy (required for express-rate-limit with X-Forwarded-For) +app.set("trust proxy", 1); + // Middleware app.use(helmet({ contentSecurityPolicy: false })); app.use(cors());