A reverse proxy real-IP fix works for the app and automated bans still hit...

The trusted client IP is correct in one path, yet security automation still consumes the older edge address from another log format.