Allow /stats from LAN/private IP ranges

2026-03-26 13:34:33 +01:00
parent c5e9896e65
commit 0ec3222873
3 changed files with 40 additions and 2 deletions
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -11,6 +11,7 @@
  - `lastHour`: total visits and unique visitors in the last 60 minutes.
  - `last5Days`: daily visits and unique visitors for the last 5 UTC calendar days.
 - Wired visit recording to `GET /api/catalog` so app opens contribute to stats.
+- Updated `/stats` access control to allow localhost and LAN/private IP clients, while still blocking public internet IPs.

 ## 0.1.0 - 2026-03-25
 - Created initial frontend-only React + TypeScript project scaffold with Vite.