From 6f0d0a952d26b1333ce2f9c8851435543cc9c1c4 Mon Sep 17 00:00:00 2001
From: Bjoern Runden <br@runden.net>
Date: Mon, 3 Aug 2026 16:59:44 +0200
Subject: [PATCH] =?UTF-8?q?corrections=20f=C3=BCr=20https=20behind=20webpr?=
 =?UTF-8?q?oxy?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 README.md | 14 +++++++-------
 app.py    |  7 +++++++
 2 files changed, 14 insertions(+), 7 deletions(-)

diff --git a/README.md b/README.md
index 4d0891a..ae31902 100644
--- a/README.md
+++ b/README.md
@@ -70,14 +70,14 @@ Für das vollständige Linux- / Staging-Gefühl kannst du Docker nutzen. Durch V
 
 ```bash
 # 1. Image bauen und Container starten
-docker-compose up --build
+docker compose up --build
 
 # 2. Anwendung beenden
 # (Strg+C oder:)
-docker-compose down
+docker compose down
 
 # 3. Datenbank und Volumes komplett zurücksetzen
-docker-compose down -v && docker-compose up --build
+docker compose down -v && docker-compose up --build
 ```
 
 ### Docker CLI-Kommandos ausführen
@@ -85,16 +85,16 @@ Du kannst `flask` Kommandos direkt gegen den laufenden Container feuern:
 
 ```bash
 # Datenbank Migrationen anlegen
-docker-compose run --rm app flask db migrate -m "neue migration"
+docker compose run --rm app flask db migrate -m "neue migration"
 
 # Datenbank-Schema updaten
-docker-compose run --rm app flask db upgrade
+docker compose run --rm app flask db upgrade
 
 # Datenbank mit Testdaten füllen
-docker-compose run --rm app flask seed-db
+docker compose run --rm app flask seed-db
 
 # Shell im Container öffnen
-docker-compose run --rm app bash
+docker compose run --rm app bash
 ```
 
 ### Zugriff auf die Anwendung
diff --git a/app.py b/app.py
index e770230..875a51d 100644
--- a/app.py
+++ b/app.py
@@ -39,6 +39,7 @@ from utils.cli import register_cli_commands
 from utils.middleware import setup_dev_mode_middleware, get_current_user, get_current_tenant
 from utils.helpers import get_request_context
 
+from werkzeug.middleware.proxy_fix import ProxyFix
 
 # Initialize extensions globally (will be bound to app in create_app)
 migrate = Migrate()
@@ -66,6 +67,12 @@ def create_app(config_class: Optional[type] = None) -> Flask:
     app = Flask(__name__)
     app.config.from_object(config_class or get_config_class())
     
+
+    # Vertraue 1 Reverse Proxy (NPM) für X-Forwarded-For, Proto, Host, Port
+    app.wsgi_app = ProxyFix(
+        app.wsgi_app, x_for=1, x_proto=1, x_host=1, x_port=1, x_prefix=1
+    )
+
     # Set up logging
     setup_logging(app)