Merge pull request #11591 from firefly-iii/release-1769370043

🤖 Automatically merge the PR into the develop branch.

app/Http/Middleware/TrustProxies.php

@@ -45,6 +45,6 @@ class TrustProxies extends Middleware
      */
     public function __construct()
     {
-        $this->proxies = (string) config('firefly.trusted_proxies');
+        $this->proxies = (string) config('trustedproxy.proxies');
     }
 }

bootstrap/app.php

@@ -33,6 +33,7 @@ use FireflyIII\Http\Middleware\Range;
 use FireflyIII\Http\Middleware\RedirectIfAuthenticated;
 use FireflyIII\Http\Middleware\SecureHeaders;
 use FireflyIII\Http\Middleware\StartFireflySession;
+use FireflyIII\Http\Middleware\TrustProxies;
 use FireflyIII\Http\Middleware\VerifyCsrfToken;
 use Illuminate\Contracts\Debug\ExceptionHandler;
 use Illuminate\Contracts\Http\Kernel;
@@ -95,7 +96,6 @@ $app = Application::configure(basePath: dirname(__DIR__))
                       health  : '/up',
                   )
                   ->withMiddleware(function (Middleware $middleware): void {
-                      $middleware->trustProxies(at: envNonEmpty('TRUSTED_PROXIES', ''));
                       // overrule the standard middleware
                       $middleware->use(
                           [
@@ -106,6 +106,7 @@ $app = Application::configure(basePath: dirname(__DIR__))
                               TrimStrings::class,
                               ConvertEmptyStringsToNull::class,
                               SecureHeaders::class,
+                              TrustProxies::class,
                           ]
                       );
 

config/firefly.php

@@ -79,7 +79,7 @@ return [
         // see cer.php for exchange rates feature flag.
     ],
     'version'                              => 'develop/2026-01-25',
-    'build_time'                           => 1769368548,
+    'build_time'                           => 1769369908,
     'api_version'                          => '2.1.0', // field is no longer used.
     'db_version'                           => 28, // field is no longer used.