Log X-Forwarded-For Header

[dkazantzas]

Currently, requests containing an X-Forwarded-For header are not logged correctly, as the IP of the Proxy server is logged instead of the IP of original client

[vbakke]

Make sure you only log X-Forwarded-For if, and only if, Yopass is configured to be behind a trusted proxy.

If you trust X-Forwarded-For blindly you only log the IP addresses of the honest people. It is the other ones you want correct IP addresses from...

The proxy Caddy Server seems to have a sensible approach to this: https://caddyserver.com/docs/caddyfile/directives/reverse_proxy#defaults