Add the 10.0.0.0/8 RFC-1918 block to _TRUSTED_PROXY_NETS so reverse proxies in cloud VPCs and Kubernetes clusters are recognized. Without this, X-Forwarded-For was silently ignored for any proxy on a 10.x.x.x address, logging all requests as originating from the proxy IP. Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>