From d283f222cae42e3a0da4bb7a18847c745c28115f Mon Sep 17 00:00:00 2001
From: Oscar Trullols <otrullols@nearbycomputing.com>
Date: Thu, 12 Mar 2026 12:29:00 +0100
Subject: [PATCH] fix: forward X-Source-Port header through proxy

Add X-Source-Port to the list of trusted forwarded headers so that
upstream services can identify VPN client source ports.
---
 proxy/proxy.go | 1 +
 1 file changed, 1 insertion(+)

diff --git a/proxy/proxy.go b/proxy/proxy.go
index e21f253adb..f00818c3e7 100644
--- a/proxy/proxy.go
+++ b/proxy/proxy.go
@@ -114,6 +114,7 @@ func (d *Proxy) Rewrite(r *httputil.ProxyRequest) {
 			"X-Forwarded-Host",
 			"X-Forwarded-Proto",
 			"X-Forwarded-For",
+			"X-Source-Port",
 		}
 		for _, h := range headers {
 			if v := r.In.Header.Get(h); v != "" {