diff --git a/app.ts b/app.ts
index 30264dfb..e36a49db 100644
--- a/app.ts
+++ b/app.ts
@@ -21,7 +21,7 @@ const app = express();
 app.use(compression());
 
 // logging
-app.enable("trust proxy"); // for :remote-addr
+app.set("trust proxy", 2); // Cloudflare → nginx → Express
 app.use(logging.stdout());
 app.use(logging.stderr());