refactor

config.yaml

@@ -1,13 +1,14 @@
 server:
   listenAddress: ":80"
-  exposedAddress: "https://birdy.greact.online"
+  exposedAddress: "https://birdy.greact.online:443"
   stunPorts:
     - 3478
   logLevel: "info"
   logFile: "console"
   authSecret: "336c2d76-3d00-4863-abc5-afe55211a36a"
+  dataDir: "/var/lib/netbird"
 
-  auth:                                     # ← ВЛОЖЕНО в server
+  auth:                                          # ← вложено под server
     issuer: "https://birdy.greact.online/oauth2"
     localAuthDisabled: false
     signKeyRefreshEnabled: true
@@ -17,6 +18,11 @@ server:
     cliRedirectURIs:
       - "http://localhost:53000/"
 
-  store:                                    # ← ВЛОЖЕНО в server
+  reverseProxy:
+    trustedHTTPProxies:
+      - "172.16.0.0/12"  # Docker-подсеть (покрывает NPM-контейнер в сети proxy)
+
+  store:                                         # ← вложено под server
     engine: "sqlite"
-    encryptionKey: "336c2d76-3d00-4863-abc5-afe55211a36a"
+    encryptionKey: "336c2d76-3d00-4863-abc5-afe55211a36a"
+