fix: rate limiting X-Real-IP from the real peer

cmd/server/main.go

@@ -45,6 +45,7 @@ var envDefaults = map[string]string{
 	"UPLOAD_DIR":                     "./data/uploads",
 	"AUTH_RATE_LIMIT_MAX_ATTEMPTS":   "5",
 	"AUTH_RATE_LIMIT_WINDOW_SECONDS": "60",
+	"TRUSTED_PROXIES":                "",
 }
 
 func main() {