改进 可信代理设置

.env.example

@@ -102,3 +102,6 @@ USER_GROUP_BIRTHDAY=1
 
 DASHBOARD_BASE_URL=https://dash.laecloud.com
 DASHBOARD_BIRTHDAY_PATH=/birthdays
+
+# 可信代理，用于获取真实 IP。多个 IP 用逗号分隔。
+TRUSTED_PROXIES=

app/Http/Middleware/TrustProxies.php

@@ -2,20 +2,13 @@
 
 namespace App\Http\Middleware;
 
+use Closure;
 use Illuminate\Http\Middleware\TrustProxies as Middleware;
+use Illuminate\Http\Request;
 use Symfony\Component\HttpFoundation\Request as RequestAlias;
 
 class TrustProxies extends Middleware
 {
-    /**
-     * The trusted proxies for this application.
-     *
-     * @var array<int, string>|string|null
-     */
-    protected $proxies = [
-        '*'
-    ];
-
     /**
      * The headers that should be used to detect proxies.
      *

app/Providers/AppServiceProvider.php

@@ -2,6 +2,7 @@
 
 namespace App\Providers;
 
+use App\Http\Middleware\TrustProxies;
 use App\Models\PersonalAccessToken;
 use Illuminate\Pagination\Paginator;
 use Illuminate\Support\Facades\Http;
@@ -27,8 +28,6 @@ public function register(): void
      */
     public function boot(): void
     {
-        //
-
         Paginator::useBootstrapFive();
 
         Sanctum::usePersonalAccessTokenModel(PersonalAccessToken::class);

config/trustedproxy.php

@@ -0,0 +1,11 @@
+<?php
+
+$trusted_proxies = [];
+
+if (env('TRUSTED_PROXIES')) {
+    $trusted_proxies = explode(',', env('TRUSTED_PROXIES'));
+}
+
+return [
+    'proxies' => $trusted_proxies,
+];