Summary
- Added configurable trusted proxy support so VolumeVault generates HTTPS URLs correctly behind Pangolin, Caddy, Traefik, nginx, and similar reverse proxies.
- Documented reverse proxy HTTPS termination setup with strict
TRUSTED_PROXIESIP/CIDR guidance and an optional*fallback for simpler homelab deployments. - Added regression tests covering trusted and untrusted
X-Forwarded-Protohandling for Vite asset URLs. - Refreshed the documentation sidebar with GitHub project badges.
Upgrade Notes
- No database schema migration is included in this release.
- No manual action is required for direct
http://localhost:8080or direct port-based installations. - If VolumeVault is served behind an HTTPS reverse proxy, set
APP_URLto your public HTTPS URL and setTRUSTED_PROXIESto your reverse proxy IP or Docker network CIDR. TRUSTED_PROXIES="*"is supported for simpler homelab setups, but using the proxy IP/CIDR is the stricter recommended option.