mirror of
https://github.com/gesellix/Bose-SoundTouch.git
synced 2026-08-19 00:56:16 +00:00
Reverse-proxy client-IP resolution (trust_forwarded_headers / trusted_proxy_cidrs) was documented under HTTPS-SETUP because proxies are commonly used for TLS termination, but it's really a deployment concern. Relocate it to CLOUD-DEPLOY-WALKTHROUGH as a "Client IP behind a proxy or load balancer" section with a behavior table (no-proxy default, trusted-proxy XFF resolution, and the untrusted-peer spoofing gate). HTTPS-SETUP keeps the TLS-termination example and now cross-links to it; the deployment section links back for the cert details. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>