Enable the "trust proxy" setting in production.