hermes-admin/hermes-agent
1
0
Fork 0
Code Issues Pull Requests Actions 4 Packages Projects Releases Wiki Activity

docs(dashboard): name what an untrusted proxy means for login limits

Browse Source
This commit is contained in:
unsupportedpastels
2026-10-05 14:16:06 +00:00
committed by Mark S.
parent 3fd7cc7731
commit c83fe1b2c4
1 changed files with 3 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
website/docs/user-guide/features/web-dashboard.md
View File

@@ -1000,7 +1000,9 @@ Only listed peers may supply `X-Forwarded-Proto` and `X-Forwarded-For`.
Hermes always preserves loopback trust and rejects `*`, `0.0.0.0/0`, and
`::/0`. Trusting a network means every container or machine on that network
can supply forwarding metadata, so prefer an exact proxy IP or a dedicated
proxy-only network.
proxy-only network. Without a trusted-proxy entry, clients behind that proxy
share its password-login rate limit and native sign-in cap, and auth audit
events record the proxy's address.
```bash
# Backend remains reachable only on this machine.