check / check (push) Waiting to run
The README and the TrustedProxies comment now say, once per passage, that the list must be set to the proxy's address alone if any client can reach webhooker or the proxy from an RFC 1918 source address, directly or through anything that can rewrite source addresses, and that the address to set is the remoteIP field of the http request log line. The loopback case in the reverse-proxy checklist is now a proxy reaching the binary bound to 127.0.0.1. Other sentences about which clients can choose their own rate-limit key are cut. Model: opus-5-5