[pull] 2.x from Kovah:2.x

.env.example

@@ -4,6 +4,17 @@
 # The app key is generated later, please leave it like that
 APP_KEY=someRandomStringWith32Characters
 
+# The URL under which LinkAce is accessible, e.g. https://links.example.com
+# Used when generating links in emails and other notifications
+APP_URL=http://localhost
+
+## Trusted Proxies and Hosts
+# Set to the IP of your reverse proxy if running behind one (e.g. nginx, Traefik).
+# Use a comma-separated list for multiple proxies: 192.168.1.1,10.0.0.1
+# Use * to trust the immediate upstream connection (any single reverse proxy).
+# Leave empty if LinkAce is accessed directly without a reverse proxy.
+TRUSTED_PROXIES=
+
 ## Configuration of the database connection
 ## Attention: Those settings are configured during the web setup, please do not modify them now.
 # Set the database driver (mysql, pgsql, sqlsrv, sqlite)

app/Http/Kernel.php

@@ -14,6 +14,7 @@ class Kernel extends HttpKernel
      * @var array
      */
     protected $middleware = [
+        \App\Http\Middleware\TrustHosts::class,
         \App\Http\Middleware\TrustProxies::class,
         \Illuminate\Http\Middleware\HandleCors::class,
         \App\Http\Middleware\PreventRequestsDuringMaintenance::class,

composer.json

@@ -11,7 +11,7 @@
     "composer/semver": "^3.3.1",
     "doctrine/dbal": "^3.7",
     "guzzlehttp/guzzle": "^7.0",
-    "kovah/laravel-html-meta": "^4.3",
+    "kovah/laravel-html-meta": "^5.0",
     "kovah/laravel-socialite-oidc": "^0.7",
     "laracasts/flash": "^3.1",
     "laravel/fortify": "^1.7",
@@ -47,7 +47,7 @@
     "barryvdh/laravel-ide-helper": "^3.1",
     "fakerphp/faker": "^1.12",
     "fruitcake/laravel-debugbar": "^4.0",
-    "laravel/tinker": "^2.2",
+    "laravel/tinker": "^3.0",
     "mockery/mockery": "^1.3",
     "nunomaduro/collision": "^v8.8",
     "phpunit/phpunit": "^11.5",