Highlights
- Add a global Trusted Proxies setting that writes server-level
trusted_proxies/client_ip_headers/trusted_proxies_strictto the Caddy HTTP server (#222). When CPM runs behind another proxy (Pangolin/Newt, Cloudflare Tunnel, nginx/HAProxy), Caddy now resolves the real client IP instead of the immediate peer — fixing client-IP attribution in access logs, analytics, the country map, and any downstream handler. Accepts CIDRs and theprivate_rangesshorthand, supports custom client IP headers (e.g.Cf-Connecting-Ip), and can optionally default the geoblock trusted-proxy list from the same value. Configurable via Settings → Networking, the/api/v1/settings/trusted-proxiesREST endpoint, and master→slave instance sync. Empty by default, preserving current behaviour on upgrade.
Changes
- 8f44a50 Add server-level trusted_proxies / client_ip_headers setting
Full Changelog: v1.8.1...v1.9