diff --git a/internal/web/web.go b/internal/web/web.go
index 4a4e26b..f03f02e 100644
--- a/internal/web/web.go
+++ b/internal/web/web.go
@@ -40,6 +40,9 @@ func NewServer(ctrl *session.Controller) *Server {
 func (s *Server) Router() *gin.Engine {
 	r := gin.New()
 	r.Use(gin.Recovery())
+	// antidriftd binds localhost only and sits behind no proxy, so trust no
+	// forwarded-IP headers. This also silences gin's trust-all-proxies warning.
+	_ = r.SetTrustedProxies(nil)
 
 	sub, _ := fs.Sub(staticFS, "static")
 	r.GET("/", func(c *gin.Context) {