negiix 更换成 caddy

backend/internal/router/router.go

@@ -48,6 +48,9 @@ func New(cfg config.Config, deps Dependencies, logger *zap.Logger) *gin.Engine {
 	}
 
 	engine := gin.New()
+	// 生产环境前置 Caddy，已用实测对端地址覆盖 X-Real-IP，
+	// 直接据此取真实客户端 IP，避免客户端伪造 X-Forwarded-For。
+	engine.TrustedPlatform = "X-Real-IP"
 	engine.Use(middleware.RequestID())
 	engine.Use(middleware.RequestLogger(logger))
 	engine.Use(middleware.Recovery(logger))