feat: django-axes prefers forwarded ip address

Prioritize `HTTP_X_FORWARDED_FOR` for django-axes similar
to audit logs with the get_client_ip.

https://django-axes.readthedocs.io/en/latest/4_configuration.html#configuring-reverse-proxies

Refs: PT-2026

Author: charn

palvelutarjotin/settings.py

@@ -447,6 +447,8 @@ def sentry_traces_sampler(sampling_context: SamplingContext) -> float:
 
 AXES_FAILURE_LIMIT = 5
 AXES_COOLOFF_TIME = 1  # hour after locked out, user will be able to attempt login
+AXES_IPWARE_META_PRECEDENCE_ORDER = ["HTTP_X_FORWARDED_FOR", "REMOTE_ADDR"]
+AXES_IPWARE_PROXY_COUNT = 1
 
 LOGGING = {
     "version": 1,