From d368bf90d56f23a58ced25f0914cbd12c9f35444 Mon Sep 17 00:00:00 2001
From: Alex Gleason <alex@alexgleason.me>
Date: Sat, 18 Jan 2025 13:13:22 -0600
Subject: [PATCH] Caddyfile: enable access log, add X-Real-IP header for rate
 limiting

---
 installation/Caddyfile | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/installation/Caddyfile b/installation/Caddyfile
index 3a91c501..79630c2a 100644
--- a/installation/Caddyfile
+++ b/installation/Caddyfile
@@ -1,4 +1,16 @@
+# Cloudflare real IP configuration for rate-limiting
+# {
+#   servers {
+#     # https://www.cloudflare.com/ips/
+#     trusted_proxies static 173.245.48.0/20 103.21.244.0/22 103.22.200.0/22 103.31.4.0/22 141.101.64.0/18 108.162.192.0/18 190.93.240.0/20 188.114.96.0/20 197.234.240.0/22 198.41.128.0/17 162.158.0.0/15 104.16.0.0/13 104.24.0.0/14 172.64.0.0/13 131.0.72.0/22 2400:cb00::/32 2606:4700::/32 2803:f800::/32 2405:b500::/32 2405:8100::/32 2a06:98c0::/29 2c0f:f248::/32
+#     trusted_proxies_strict
+#   }
+# }
+
 example.com {
+  log
+  request_header X-Real-IP {client_ip}
+
   @public path /packs/* /instance/* /images/* /favicon.ico /sw.js /sw.js.map
 
   handle /packs/* {