bvandeusenandClaude Opus 5.5 753a6ccb31 feat(6866): the proxy hop count is an admin setting, and the server shows what each count reads ...

An admin can save how many reverse proxies stand in front of Grimoire.
A saved count wins over TRUSTED_PROXY_HOPS, which stays the starting
value. Each worker loads it at startup (under a deadline) and re-reads
it every 30s; the worker that saves applies it at once.

GET/PUT /api/admin/proxy returns the count, where it came from, and a
readout of the admin's own request: the socket peer, the forwarding
chains, what counts 0-3 would read, and the count that reads
Cloudflare's visitor when Cloudflare's headers are present. Saves are
audit-logged. A "too many attempts" reply now says where to look when
everyone is being blocked.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-11-05 09:55:42 -05:00

..

api-keys-and-mcp.md

rename(547): the repo is FabledGrimoire, and no stray "scribe" is left

2026-10-22 13:29:00 -04:00

api-reference.md

feat(6866): the proxy hop count is an admin setting, and the server shows what each count reads

2026-11-05 09:55:42 -05:00

architecture.md

feat(6849): the command-line restore uses the same rollback, and the docs say how restore works now

2026-11-04 20:08:31 -05:00

backups.md

feat(6849): the command-line restore uses the same rollback, and the docs say how restore works now

2026-11-04 20:08:31 -05:00

configuration.md

feat(6838): read the client address and HTTPS from the trusted proxy hop

2026-11-04 19:32:20 -05:00

design-system.md

fix(design): the app serves its own fonts and names no other host

2026-10-22 11:27:40 -04:00

development.md

fix(6244): the instance keeps its own SECRET_KEY in /data, and docker-compose.yml is the compose users deploy from

2026-10-22 16:13:43 -04:00

features.md

docs(6856): the plugin's guidance and the docs say what a session may do in another project

2026-11-04 21:52:09 -05:00

sso-oauth.md

rename(547): what people read says Grimoire

2026-10-22 10:46:37 -04:00