短信发送失败增加冷却防连点限流并配置trust proxy恢复真实客户端IP

2026-08-22 19:10:06 +08:00
parent 7e1c879c41
commit 90ff15b627
10 changed files with 59 additions and 0 deletions
@@ -27,6 +27,11 @@ type CreateAppOptions = {
 export function createApp({ startupState, isShutdownStarted, config }: CreateAppOptions) {
  const app = express()

+  // 部署在反代（Caddy）之后时让 req.ip 取 X-Forwarded-For 的真实客户端地址；限流、访问日志与登录设备记录都依赖它。
+  if (config.server?.trustProxy !== undefined && config.server?.trustProxy !== null) {
+    app.set('trust proxy', config.server.trustProxy)
+  }
+
  app.use(accessLogMiddleware)
  app.use(createCorsMiddleware(config))
  app.use(