CodesWhat/drydock v1.1.3

on GitHub

Bug Fixes

• ERR_ERL_PERMISSIVE_TRUST_PROXY on startup — Express trust proxy was hard-coded to true, which triggers a validation error in express-rate-limit v8+ when the default key generator infers client IP from X-Forwarded-For. Replaced with a configurable DD_SERVER_TRUSTPROXY env var (default: false). Set to 1 (hop count) when behind a single reverse proxy, or a specific IP/CIDR for tighter control. (#43)

Upgrade notes

If you run drydock behind a reverse proxy, add this to your environment:

environment:
  - DD_SERVER_TRUSTPROXY=1

Without this, rate limiting will key on the server's own IP, which is usually fine for single-user setups but won't distinguish clients behind a shared proxy.

Full changelog: https://github.com/CodesWhat/drydock/blob/main/CHANGELOG.md#113