trustedProxies property

List<String> trustedProxies
final

IPs or CIDR ranges of reverse proxies (nginx, Caddy, load balancer) that Dox trusts. Only when the direct client is in this list does Dox read X-Forwarded-For for req.ip() and X-Forwarded-Proto for req.scheme(). Use ['*'] to trust any direct client, but only the last X-Forwarded-For hop (only safe when the app port is not reachable from outside). Empty by default.

Implementation

final List<String> trustedProxies;