Kyle Pope 21aa670a39 Extract real client IP from proxy headers instead of Docker bridge IP ...

Nginx already forwards X-Forwarded-For and X-Real-IP, but the backend
read request.client.host directly — always returning 172.18.0.x. Added
get_client_ip() helper to audit service; updated all 13 call sites.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-01 19:20:07 +08:00

..

audit.py

Extract real client IP from proxy headers instead of Docker bridge IP

2026-03-01 19:20:07 +08:00

auth.py

L-03: Session 7-day sliding window with 30-day hard ceiling

2026-02-27 15:45:15 +08:00

ntfy_templates.py

Implement Track C: NTFY push notification integration

2026-02-25 04:04:23 +08:00

ntfy.py

Fix QA review findings: update docs and comments

2026-02-26 02:42:59 +08:00

recurrence.py

Fix QA findings: firstDay reactivity, state revert, helper extraction

2026-02-22 02:02:15 +08:00

totp.py

Implement Stage 6 Track B: TOTP MFA (pyotp, Fernet-encrypted secrets, backup codes)

2026-02-25 04:18:05 +08:00