try: ip fix for cludflare

- Introduced AI File Sorting functionality to automatically organize documents into a smart folder hierarchy based on source, date, and topic.
- Updated README.md to include the new feature.
- Enhanced homepage components with new illustrations and descriptions for AI File Sorting.
- Refactored rate limiting logic to extract real client IPs more accurately.

surfsense_backend/app/rate_limiter.py

@@ -1,13 +1,33 @@
 """Shared SlowAPI limiter instance used by app.py and route modules."""
 
+from __future__ import annotations
+
 from limits.storage import MemoryStorage
 from slowapi import Limiter
-from slowapi.util import get_remote_address
+from starlette.requests import Request
 
 from app.config import config
 
+
+def get_real_client_ip(request: Request) -> str:
+    """Extract the real client IP behind Cloudflare / reverse proxies.
+
+    Priority: CF-Connecting-IP > X-Real-IP > X-Forwarded-For (first entry) > socket peer.
+    """
+    cf_ip = request.headers.get("cf-connecting-ip")
+    if cf_ip:
+        return cf_ip.strip()
+    real_ip = request.headers.get("x-real-ip")
+    if real_ip:
+        return real_ip.strip()
+    forwarded = request.headers.get("x-forwarded-for")
+    if forwarded:
+        return forwarded.split(",")[0].strip()
+    return request.client.host if request.client else "127.0.0.1"
+
+
 limiter = Limiter(
-    key_func=get_remote_address,
+    key_func=get_real_client_ip,
     storage_uri=config.REDIS_APP_URL,
     default_limits=["1024/minute"],
     in_memory_fallback_enabled=True,