## Context Rate limiting and logging need the real client IP behind proxies. ## Task - Add TRUST_PROXY env and apply app.set('trust proxy') ## Acceptance criteria - [ ] Documented in docs/DEPLOYMENT.md This issue is self-contained and can be picked up independently of any other open issue.
Context
Rate limiting and logging need the real client IP behind proxies.
Task
Acceptance criteria
This issue is self-contained and can be picked up independently of any other open issue.