fix: restore working trust format and improve header debugging

Author: webees

Dockerfile

@@ -16,7 +16,8 @@ ENV WORKDIR=/app \
     OVERMIND_CAN_DIE=crontab \
     # Gotify settings
     GOTIFY_SERVER_PORT=8080 \
-    GOTIFY_SERVER_TRUSTEDPROXIES=127.0.0.0/8,::1/128
+    # Standard YAML array format is required by Gotify's Viper config loader
+    GOTIFY_SERVER_TRUSTEDPROXIES='["127.0.0.1", "::1"]'
 
 WORKDIR $WORKDIR
 

config/Caddyfile

@@ -8,7 +8,6 @@
 	admin off
 	persist_config off
 
-	# Trust Fly.io private networking for accurate IP parsing
 	servers {
 		trusted_proxies static private_ranges
 	}
@@ -22,13 +21,12 @@
 
 # ── Site Block ────────────────────────────────────────────────────────────────
 :80 {
-	# Always allow health checks bypass for Fly.io monitoring
+	# Always allow health checks bypass
 	handle /health {
 		respond "OK" 200
 	}
 
 	# Domain Access Control
-	# Block requests if CADDY_DOMAINS is set and host doesn't match
 	@outside_domain {
 		expression `{env.CADDY_DOMAINS} != ""`
 		not host {$CADDY_DOMAINS}
@@ -41,29 +39,34 @@
 	handle {
 		encode zstd gzip
 
-		# Harden security posture
 		header {
-			# Infrastructure protection
 			Strict-Transport-Security "max-age=31536000;"
 			X-Content-Type-Options "nosniff"
 			X-Frame-Options "DENY"
 			X-XSS-Protection "1; mode=block"
-
-			# Privacy & Anti-tracking
 			Referrer-Policy "strict-origin-when-cross-origin"
 			Permissions-Policy "camera=(), microphone=(), geolocation=(), payment=()"
 			X-Robots-Tag "noindex, nofollow"
-
-			# Hide sensitive headers
 			-Server
 			-X-Powered-By
 			-Last-Modified
 		}
 
-		# Proxy to the application backend
+		# Proxy and debug request headers
 		reverse_proxy 127.0.0.1:8080 {
+			# Explicitly set headers
 			header_up X-Real-IP {http.request.header.CF-Connecting-IP:{http.request.header.Fly-Client-IP:{remote_host}}}
 			header_up X-Forwarded-For {http.request.header.CF-Connecting-IP:{http.request.header.Fly-Client-IP:{remote_host}}}
+			
+			# Debug: print all relevant headers to Caddy stdout
+			# header_up X-Debug-Headers "{http.request.headers.*}"
 		}
 	}
+	
+	# Enable debug logging for headers
+	log {
+		output stdout
+		format console
+		# log HTTP request headers to debug mapping
+	}
 }