From 5a9a3b4f8b6c615d6a760e844b87d5958bb281be Mon Sep 17 00:00:00 2001
From: Brad Stein <Brad.Stein@gmail.com>
Date: Thu, 1 Jan 2026 21:51:27 -0300
Subject: [PATCH] auth: trust proxy headers

---
 backend/app.py | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/backend/app.py b/backend/app.py
index cba7186..2fe1231 100644
--- a/backend/app.py
+++ b/backend/app.py
@@ -18,9 +18,11 @@ from flask_cors import CORS
 import httpx
 import jwt
 from jwt import PyJWKClient
+from werkzeug.middleware.proxy_fix import ProxyFix
 
 
 app = Flask(__name__, static_folder="../frontend/dist", static_url_path="")
+app.wsgi_app = ProxyFix(app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_port=1)
 CORS(app, resources={r"/api/*": {"origins": "*"}})
 
 MONERO_GET_INFO_URL = os.getenv("MONERO_GET_INFO_URL", "http://monerod.crypto.svc.cluster.local:18081/get_info")