fix: correct sidebar LAN detection for public access

Separate Tailscale IP detection from true LAN detection so public internet users routed through VPS no longer get non-routable port links in the sidebar. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-01 22:46:05 +08:00
parent 50e1d779de
commit 72bb37ffe5
2 changed files with 24 additions and 3 deletions
@@ -134,8 +134,19 @@ async def client_ip(request: Request):
        forwarded = request.headers.get("x-forwarded-for", "").split(",")[0].strip()
        if forwarded:
            ip = forwarded
-    import config
-    lan = config.is_lan_ip(ip) if not ip.startswith("100.") else config.is_lan_ip(ip) and _router_reachable()
+
+    # LAN detection logic:
+    # - True LAN IP (192.168.31.x) → lan=True
+    # - Tailscale IP with router reachable → lan=True (user at home with Tailscale)
+    # - Tailscale IP without router reachable → lan=False (remote via VPS proxy)
+    # - Other IPs → lan=False (public internet)
+    if config.is_lan_ip(ip):
+        lan = True
+    elif config.is_tailscale_ip(ip):
+        lan = _router_reachable()
+    else:
+        lan = False
+
    return {"lan": lan}

 def _router_reachable():