shamoon

Thank you!

Thanks @tribut , wasn’t aware of that. Can you explain how one might do that (in a way that can’t also be spoofed)?

> My own 2 cents on this is users should use a reverse proxy for integrating security related things like fail2ban or crowdsec. Tools like Traefik already handle access logs...

Ok I've updated this to use django-ipware which has support for trusted proxies, and a new (optional) setting `PAPERLESS_TRUSTED_PROXIES` which I think achieves this. Again, if consensus is to not...

@tribut any other thoughts?

Closed by #451

Homepage has nothing to do with deciding what user level has api access, that’d be a decision at the portainer project

Closed by #660

I see the issue, I'll fix

should be sorted, please check once its done building ~10 min