feat: ip

bootstrap/app.php

@@ -23,6 +23,18 @@ return Application::configure(basePath: dirname(__DIR__))
         health: '/up',
     )
     ->withMiddleware(function (Middleware $middleware): void {
+        // Cloudflare / reverse proxy: honor X-Forwarded-* so $request->ip()
+        // is the visitor IP. TRUSTED_PROXIES=* | CIDR list | empty to disable.
+        $trustedProxies = env('TRUSTED_PROXIES', '*');
+        if ($trustedProxies === '*') {
+            $middleware->trustProxies(at: '*');
+        } elseif (is_string($trustedProxies) && trim($trustedProxies) !== '') {
+            $middleware->trustProxies(at: array_values(array_filter(array_map(
+                'trim',
+                explode(',', $trustedProxies)
+            ))));
+        }
+
         $middleware->alias([
             'admin.super' => \App\Http\Middleware\EnsureSuperAdmin::class,
             'panel.host' => \App\Http\Middleware\EnsurePanelHost::class,