furtka/ops
Daniel Maksymilian Syrnicki aaba14731c
All checks were successful
CI / lint (push) Successful in 33s
CI / test (push) Successful in 2m7s
CI / validate-json (push) Successful in 25s
CI / markdown-links (push) Successful in 16s
fix(poll): resolve the client address via nginx real_ip, never from X-Forwarded-For
A client-supplied X-Forwarded-For could mint a fresh device hash per
request. nginx now trusts only the edge hop (192.168.178.164) when
unwinding the chain and passes the result as X-Real-IP; the service
uses nothing else. setup-poll.sh --reset wipes the vote table.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01MScAinbyMdeNc7H2BZdnnG
2026-08-26 13:21:19 +02:00
..
forgejo ops(forgejo): whitelist owner in branch protection push rule 2026-04-16 13:02:25 +02:00
forgejo-runner feat(website): legal pages (Impressum/Datenschutz) + auto-deploy on push-to-main 2026-04-18 12:10:06 +02:00
nginx fix(poll): resolve the client address via nginx real_ip, never from X-Forwarded-For 2026-08-26 13:21:19 +02:00
poll fix(poll): resolve the client address via nginx real_ip, never from X-Forwarded-For 2026-08-26 13:21:19 +02:00