mcp connection

infrastructure/docker-compose.yml

@@ -152,6 +152,17 @@ services:
       # Unset, the server derives it from HTTP_CORS_ORIGINS. The default below
       # is deliberate: a compose deployment keeps Lax unless told otherwise.
       HTTP_COOKIE_SAMESITE: ${HTTP_COOKIE_SAMESITE:-lax}
+      # Networks whose X-Forwarded-For may be believed. Empty means none, and
+      # empty is what this file defaults to on purpose: a value invented here
+      # would be trusted by every deployment that copies it.
+      #
+      # It MUST be set for this topology. The api container publishes on
+      # loopback with a reverse proxy in front, so without it Go sees the
+      # proxy's address on every request and the three address-keyed limits —
+      # failed logins, OAuth registration, OAuth authorization before sign-in —
+      # become one budget shared by every user. See .env.docker.example for how
+      # to find the right value.
+      HTTP_TRUSTED_PROXIES: ${HTTP_TRUSTED_PROXIES:-}
       DATABASE_MAX_OPEN_CONNS: ${DATABASE_MAX_OPEN_CONNS:-25}
       DATABASE_MIN_IDLE_CONNS: ${DATABASE_MIN_IDLE_CONNS:-2}
       DATABASE_CONN_MAX_LIFETIME: ${DATABASE_CONN_MAX_LIFETIME:-30m}