uvicorn now trusts headers from reverse_proxy (see $OHLALA_TRUST_PROXY_IP in entrypoint.sh) Defaults to '*'
