Update trusted proxy configuration in .env.docker.example

Reorganize trusted proxy settings and clarify comments.

.env.docker.example

@@ -34,26 +34,19 @@ APP_DOMAIN="yourdomain.com"
 ADMIN_DOMAIN="yourdomain.com"
 SESSION_DOMAIN=null # Keep as null unless required for sharing session cookies with subdomains like SSO
 
-# Trusted Proxies
-# TRUST_PROXIES is read by Laravel's TrustProxies middleware. Since the serversideup
-# web server (Caddy) already validates the proxy before the request reaches PHP,
-# trusting all upstream proxies at the application layer is the expected setup here.
-TRUST_PROXIES="*"
-#
-# TRUSTED_PROXY is read by the serversideup FrankenPHP image to decide which proxies
-# the web server trusts for the forwarded client IP. Without it set correctly, logs,
-# geolocation, and rate limiting see the proxy IP instead of the real visitor IP.
+# TRUSTED_PROXY (Required)
+# Read by the serversideup FrankenPHP image.
 #   cloudflare (default) - trust Cloudflare ranges (CF-Connecting-IP) + Docker networks
 #   sucuri               - trust Sucuri WAF ranges (X-Forwarded-For) + Docker networks
 #   local                - trust only private/Docker network ranges (X-Forwarded-For)
 #   off                  - disable trusted proxy handling
-# All options except "off" already include the Docker internal ranges, so "cloudflare"
-# covers both Cloudflare and an in-Docker reverse proxy (Traefik/Caddy) at the same time.
-# Only trust proxies you control: a trusted proxy lets a client spoof its IP via headers.
-# Defaults to "local" for the in-Docker reverse proxy setup; switch to "cloudflare"
-# if this instance sits behind Cloudflare.
 TRUSTED_PROXY="local"
 
+# Trusted Proxies (Don't touch)
+# TRUST_PROXIES is read by Laravel's TrustProxies middleware. The serversideup
+# web server (Caddy) already validates the proxy before the request reaches PHP.
+TRUST_PROXIES="*"
+
 # Database Configuration
 DB_CONNECTION="mysql"
 DB_HOST="db"