.env.example

@@ -43,3 +43,5 @@ SECURITY_STRICT_LIMIT_REQUEST_COUNT = strict_request_count # default ist 15
 USE_SECURITY_LIMIT = (true|false) # default ist true
 SECURITY_LIMIT_WINDOW = [0-9]*(y|d|h|m|s) # default ist 1m
 SECURITY_LIMIT_REQUEST_COUNT = request_count # default ist 500
+
+TRUST_PROXY = <boolean|number|ip|ip1,ip2,...> # wenn leer, wird dieser Wert nicht angewendet.

package-lock.json

@@ -17,6 +17,7 @@
         "handlebars": "^4.7.8",
         "helmet": "^8.0.0",
         "ics": "^3.8.1",
+        "ip": "^2.0.1",
         "jsonwebtoken": "^9.0.2",
         "lodash.uniqby": "^4.7.0",
         "moment": "^2.30.1",
@@ -41,6 +42,7 @@
       "devDependencies": {
         "@types/cors": "^2.8.14",
         "@types/express": "^4.17.17",
+        "@types/ip": "^1.1.3",
         "@types/jsonwebtoken": "^9.0.6",
         "@types/lodash.uniqby": "^4.7.9",
         "@types/morgan": "^1.9.9",
@@ -535,6 +537,16 @@
       "integrity": "sha512-D0CFMMtydbJAegzOyHjtiKPLlvnm3iTZyZRSZoLq2mRhDdmLfIWOCYPfQJ4cu2erKghU++QvjcUjp/5h7hESpA==",
       "dev": true
     },
+    "node_modules/@types/ip": {
+      "version": "1.1.3",
+      "resolved": "https://registry.npmjs.org/@types/ip/-/ip-1.1.3.tgz",
+      "integrity": "sha512-64waoJgkXFTYnCYDUWgSATJ/dXEBanVkaP5d4Sbk7P6U7cTTMhxVyROTckc6JKdwCrgnAjZMn0k3177aQxtDEA==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
     "node_modules/@types/jsonwebtoken": {
       "version": "9.0.6",
       "resolved": "https://registry.npmjs.org/@types/jsonwebtoken/-/jsonwebtoken-9.0.6.tgz",
@@ -2681,6 +2693,12 @@
       "resolved": "https://registry.npmjs.org/ini/-/ini-1.3.8.tgz",