Let app.coffee read settings from config.express.

and fixed the trust proxy default settings.