Proxy Pass

An internal diagnostics endpoint trusts an address supplied by a forwarding proxy.

Audit /api/medium/internal. The deployment notes say internal requests originate from 127.0.0.1.