trust proxy

.env.example

@@ -2,6 +2,12 @@
 HOST=0.0.0.0
 PORT=3000
 
+# Public base URL of the site (the domain your users see, including scheme,
+# WITHOUT a trailing slash). When set, share links returned by the API and the
+# dashboard are absolute URLs (e.g. https://files.example.com/xmK5lLMRErlN).
+# Leave unset to keep relative paths (the browser host is used).
+PUBLIC_BASE_URL=https://files.example.com
+
 # Storage: persistent filesystem directory where uploaded files and
 # metadata live. Files survive restarts.
 STORAGE_DIR=./storage