diff --git a/templates/bookstack/docker-compose.yml b/templates/bookstack/docker-compose.yml
index c9f60b4..67089fd 100644
--- a/templates/bookstack/docker-compose.yml
+++ b/templates/bookstack/docker-compose.yml
@@ -26,6 +26,10 @@ services:
       - DB_PASSWORD=${DB_PASSWORD}
       - DB_DATABASE=bookstack
       - APP_KEY=${APP_KEY}
+      # R-753 (controller >= 0.286.0): trust the docker networks as proxies, so Laravel walks X-Forwarded-For from the
+      # RIGHT and keys its login throttle on each VISITOR (tunnel: the real address; LAN: the LAN client). Measured on
+      # 9202: without it a stranger's 5 wrong tries throttled the household too; with it only the stranger.
+      - APP_PROXIES=172.16.0.0/12
       - APP_URL=https://${SUBDOMAIN}.${DOMAIN}
     volumes:
       - bookstack_config:/config