From 36edd32fa3b40181fe38ec64ac817197bdf1e35b Mon Sep 17 00:00:00 2001
From: Beda Schmid <beda@tukutoi.com>
Date: Sat, 9 May 2026 15:33:31 -0300
Subject: [PATCH] Remove IP Forwarding debug code

---
 docker-compose.yaml |  1 -
 server.js           | 25 -------------------------
 2 files changed, 26 deletions(-)

diff --git a/docker-compose.yaml b/docker-compose.yaml
index b3a9b9d..1b02fc3 100644
--- a/docker-compose.yaml
+++ b/docker-compose.yaml
@@ -11,7 +11,6 @@ services:
       DATA_DIR: /data
       SEED_DEMO_MEMES: "false"
       TRUST_PROXY: ${TRUST_PROXY:-false}
-      DEBUG_CLIENT_IP: ${DEBUG_CLIENT_IP:-false}
       ADMIN_TOKEN: ${ADMIN_TOKEN}
       OPENAI_API_KEY: ${OPENAI_API_KEY}
       OPENAI_MODERATION_MODEL: ${OPENAI_MODERATION_MODEL:-gpt-4o-mini}
diff --git a/server.js b/server.js
index 3822e0b..f9a5163 100644
--- a/server.js
+++ b/server.js
@@ -19,7 +19,6 @@ const PAGE_SIZE_MAX = 48;
 const UPLOAD_MAX_BYTES = 5 * 1024 * 1024;
 const REQUEST_MAX_BYTES = 6 * 1024 * 1024;
 const SSE_HEARTBEAT_MS = 25_000;
-const DEBUG_CLIENT_IP = process.env.DEBUG_CLIENT_IP === 'true';
 const events = new Set();
 const DISCOVERY_ROUTES = new Set([
   '/robots.txt',
@@ -110,12 +109,6 @@ const server = http.createServer(async (req, res) => {
       });
     }
 
-    if (req.method === 'GET' && url.pathname === '/api/debug/ip') {
-      noIndex(res);
-      if (!DEBUG_CLIENT_IP) return sendJson(res, 404, { error: 'Not found' });
-      return sendJson(res, 200, clientIpDebug(req));
-    }
-
     if (req.method === 'GET' && url.pathname === '/api/admin/pending') {
       noIndex(res);
       if (!isAdminRequest(req)) return sendJson(res, 404, { error: 'Not found' });
@@ -327,26 +320,8 @@ function safeIds(ids) {
 
 function clientIp(req) {
   if (process.env.TRUST_PROXY === 'true') {
-    const edgeClientIp = String(req.headers['x-bitsforfree-client-ip'] || '').trim();
-    if (edgeClientIp) return edgeClientIp;
-
     const forwarded = String(req.headers['x-forwarded-for'] || '').split(',')[0].trim();
     if (forwarded) return forwarded;
   }
   return req.socket.remoteAddress || 'unknown';
 }
-
-function clientIpDebug(req) {
-  return {
-    trustProxy: process.env.TRUST_PROXY === 'true',
-    resolvedClientIp: clientIp(req),
-    remoteAddress: req.socket.remoteAddress || '',
-    headers: {
-      xBitsForFreeClientIp: req.headers['x-bitsforfree-client-ip'] || '',
-      xForwardedFor: req.headers['x-forwarded-for'] || '',
-      xRealIp: req.headers['x-real-ip'] || '',
-      forwarded: req.headers.forwarded || '',
-      cfConnectingIp: req.headers['cf-connecting-ip'] || ''
-    }
-  };
-}