furtka/ops/nginx
Daniel Maksymilian Syrnicki aaba14731c
All checks were successful
CI / lint (push) Successful in 33s
CI / test (push) Successful in 2m7s
CI / validate-json (push) Successful in 25s
CI / markdown-links (push) Successful in 16s
fix(poll): resolve the client address via nginx real_ip, never from X-Forwarded-For
A client-supplied X-Forwarded-For could mint a fresh device hash per
request. nginx now trusts only the edge hop (192.168.178.164) when
unwinding the chain and passes the result as X-Real-IP; the service
uses nothing else. setup-poll.sh --reset wipes the vote table.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MScAinbyMdeNc7H2BZdnnG
2026-08-26 13:21:19 +02:00
..
furtka.org.conf fix(poll): resolve the client address via nginx real_ip, never from X-Forwarded-For 2026-08-26 13:21:19 +02:00
poll-ratelimit.conf feat(website): logo poll at /logo/ with cookie-free vote counter 2026-08-26 12:57:23 +02:00
setup-vm.sh feat(website): logo poll at /logo/ with cookie-free vote counter 2026-08-26 12:57:23 +02:00