🚦 Rate limits fixed behind proxies
On instances behind a reverse proxy, Rallly often couldn't tell visitors apart, so everyone shared one rate limit. A few sign ins or responses from anyone could lock out the whole instance with rate limit errors.
Rallly now reads each visitor's address from X-Real-IP, then X-Forwarded-For, so limits apply per visitor again. If requests pass through more than one proxy, set the new TRUSTED_PROXIES variable. The bundled proxy needs no change. See Configuration.
🔍 Search
Press ⌘ K (Ctrl K on Windows and Linux) to find polls, events and members, or to switch spaces.
✉️ Participant email on by default
New polls ask participants for an email address. Existing polls keep their setting.
🐛 Fixes
- The public poll page no longer includes other respondents' email addresses in the page data.
- Gmail's "Add to calendar" works on the organizer's copy of the finalized event.
- Fixed crashes when translating the page in the browser, and when mixing all day and timed options in the poll form.
⬆️ Upgrade notes
- 2 database migrations run on start. Back up before upgrading.
Full Changelog: v4.16.1...v4.17.0