fix: remove rate_limit directive (no Caddy plugin), clean up redundant headers

deploy/Caddyfile

@@ -11,15 +11,11 @@ http://api.{$DOMAIN} {
 	reverse_proxy @s3 minio:9000 {
 		header_up Host {host}
 		header_up X-Real-IP {remote}
-		header_up X-Forwarded-For {remote}
-		header_up X-Forwarded-Proto {scheme}
 	}
 
 	reverse_proxy backend:8080 {
 		header_up Host {host}
 		header_up X-Real-IP {remote}
-		header_up X-Forwarded-For {remote}
-		header_up X-Forwarded-Proto {scheme}
 	}
 
 	header {
@@ -28,15 +24,6 @@ http://api.{$DOMAIN} {
 		Referrer-Policy "strict-origin-when-cross-origin"
 		Permissions-Policy "geolocation=(self), microphone=(), camera=()"
 	}
-
-	@auth {
-		path /api/v1/auth/*
-	}
-	rate_limit @auth {
-		zone auth
-		rate 10/minute
-		key {remote}
-	}
 }
 
 # Frontend main domain
@@ -44,8 +31,6 @@ http://{$DOMAIN} {
 	reverse_proxy frontend:3000 {
 		header_up Host {host}
 		header_up X-Real-IP {remote}
-		header_up X-Forwarded-For {remote}
-		header_up X-Forwarded-Proto {scheme}
 	}
 
 	header {