From 167e5a9a8be433c87a84503c6dd8723e10298cb4 Mon Sep 17 00:00:00 2001
From: delta-lynx-89e8 <delta-lynx-89e8@device.local>
Date: Mon, 23 Feb 2026 04:37:55 -0800
Subject: [PATCH] fix: add trust proxy for express-rate-limit behind nginx

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 server/src/index.ts | 1 +
 1 file changed, 1 insertion(+)

diff --git a/server/src/index.ts b/server/src/index.ts
index 95970a8..ac0a128 100644
--- a/server/src/index.ts
+++ b/server/src/index.ts
@@ -38,6 +38,7 @@ const io = setupSocket(httpServer);
 app.set('io', io);
 
 // Middleware
+app.set('trust proxy', 1);
 app.use(helmet({ contentSecurityPolicy: false }));
 app.use(cors({ origin: env.CLIENT_URL, credentials: true }));
 app.use(cookieParser());