jack e935c897c6 feat: Cloudflare integration — real IP forwarding + firewall lockdown ... Traefik traefik.yml.j2: - Add forwardedHeaders.trustedIPs with all Cloudflare CIDR ranges on both web and websecure entrypoints so rate limiting and CrowdSec see real visitor IPs, not Cloudflare proxy IPs firewall.yml: - Replace open HTTP/HTTPS rules with per-CIDR allow rules scoped to Cloudflare IP ranges only - Direct access to ports 80/443 bypassing Cloudflare is now blocked Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>		2026-03-22 04:02:06 +07:00
..
dynamic	feat: comprehensive security hardening	2026-03-22 03:44:54 +07:00
traefik.yml.j2	feat: Cloudflare integration — real IP forwarding + firewall lockdown	2026-03-22 04:02:06 +07:00