create-apollo-monorepo 0.9.10 → 0.9.12

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (2) hide show
  1. package/index.mjs +6 -1
  2. package/package.json +1 -1
package/index.mjs CHANGED
@@ -843,7 +843,7 @@ single-origin URL.
843
843
  | \`BACKEND_API_PATHS\` | \`auth\\|v1\\|cron\\|email\\|health\\|mcp\\|admin\\|editing-presence\` | Pipe-separated /api/* segments routed to backend |
844
844
  | \`MAX_BODY_BYTES\` | \`52428800\` (50MB) | Reject larger bodies. \`0\` = unlimited |
845
845
  | \`UPSTREAM_TIMEOUT_MS\` | \`60000\` | Request timeout to upstream |
846
- | \`TRUST_PROXY\` | \`0\` | Set \`1\` only if behind another trusted proxy (CDN/LB) |
846
+ | \`TRUST_PROXY\` | \`1\` | Honors inbound X-Forwarded-* from upstream TLS terminator (nginx/Caddy/CF/LB). Set \`0\` if proxy is directly internet-facing |
847
847
 
848
848
  ## Health check
849
849
 
@@ -919,6 +919,11 @@ function writeRootEnv(targetDir, { dbUrl, siteUrl, locale, authSecret, cronSecre
919
919
  `PROXY_PORT=${DEFAULT_PROXY_PORT}`,
920
920
  `FRONTEND_PORT=${DEFAULT_FRONTEND_PORT}`,
921
921
  `BACKEND_PORT=${DEFAULT_BACKEND_PORT}`,
922
+ "# Honor inbound X-Forwarded-* headers from an upstream TLS terminator",
923
+ "# (nginx / Caddy / Cloudflare / load balancer). Required so Better Auth,",
924
+ "# rate limiting, and audit logs see the real client origin & IP instead",
925
+ "# of the LB's. Set to 0 only if the proxy is directly internet-facing.",
926
+ "TRUST_PROXY=1",
922
927
  "",
923
928
  "# ── Shared (consumed by both apps) ───────────────────────────────",
924
929
  `DATABASE_URL=${dbUrl}`,
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "create-apollo-monorepo",
3
- "version": "0.9.10",
3
+ "version": "0.9.12",
4
4
  "description": "Scaffold a monorepo with a frontend app and Apollo CMS as a git submodule backend (single-origin via Next.js rewrites + assetPrefix)",
5
5
  "bin": {
6
6
  "create-apollo-monorepo": "index.mjs"