refactor: nginx 透传外层代理 IP 头并禁用审计日志页面的审计记录

- Dockerfile.app/local: 使用 map 指令智能处理 X-Real-IP 和 X-Forwarded-For,
  有外层代理头则透传,否则使用 remote_addr
- audit.py: 查看审计日志不再产生审计记录,避免刷新页面时产生大量无意义日志
This commit is contained in:
fawney19
2026-01-06 17:23:08 +08:00
parent 2395093394
commit 835be3d329
3 changed files with 29 additions and 4 deletions

View File

@@ -107,6 +107,9 @@ class AdminGetAuditLogsAdapter(AdminApiAdapter):
limit: int
offset: int
# 查看审计日志本身不应该产生审计记录,避免刷新页面时产生大量无意义的日志
audit_log_enabled: bool = False
async def handle(self, context): # type: ignore[override]
db = context.db
cutoff_time = datetime.now(timezone.utc) - timedelta(days=self.days)