From 19c960e78441659f4bb4d9002dfcb2d96ce7c406 Mon Sep 17 00:00:00 2001 From: Diego Date: Wed, 11 Nov 2026 13:32:06 -0300 Subject: [PATCH] fix(copilot): set TRUST_PROXY=1 so rate limits use the ALB client IP Since the Flowise 3.0.11 upgrade the server reads TRUST_PROXY, not NUMBER_OF_PROXIES. Unset means trust proxy=true, which takes the leftmost X-Forwarded-For entry and lets callers bypass per-chatflow rate limits. Co-Authored-By: Claude Opus 5.5 --- copilot/flowise/manifest.yml | 3 +++ 1 file changed, 3 insertions(+) diff --git a/copilot/flowise/manifest.yml b/copilot/flowise/manifest.yml index 56784994fe9..9de242027f7 100644 --- a/copilot/flowise/manifest.yml +++ b/copilot/flowise/manifest.yml @@ -68,6 +68,9 @@ variables: # Pass environment variables as key value pairs. NODE_ENV: 'production' PORT: '4000' NUMBER_OF_PROXIES: '1' + # Since Flowise 3.0.11 the server reads TRUST_PROXY, not NUMBER_OF_PROXIES; unset means `true`, which lets callers + # pick their IP with X-Forwarded-For and bypass rate limits. 1 = the ALB is the only proxy in front. + TRUST_PROXY: '1' STORAGE_TYPE: 's3' S3_STORAGE_BUCKET_NAME: from_cfn: ${COPILOT_APPLICATION_NAME}-${COPILOT_ENVIRONMENT_NAME}-theansweraiserverstorageBucketName