feature: the status page shows the Client IP, and web.status_content sets how much it shows.

ADR.md

@@ -42,9 +42,15 @@ the package depends on, and no web framework. It listens on `web.port`, 7081 by
 address of the internal interface, of the external interface or of both, as `web.listen` sets
 (`internal`, `external` or `both`, the default), with a server for each address, and is on
 unless `web.enabled` is `false` (ADR-7). `/` is for people, in plain text for `curl` and `wget`
-and as a Tailwind CSS page for a browser, and `/status` is the same status as JSON. It shows the
-state of the services, the package version and the state of the site-to-site, road-warrior,
-OpenVPN and WireGuard features, and nothing from the configuration. `vpn-router-setup` opens the
+and as a Tailwind CSS page for a browser, and `/status` is the same status as JSON. Both show as
+much as `web.status_content` says, since the router is reachable from the internet and the
+operator decides how much it tells strangers: `basic` the overall status and the Client IP,
+`standard` also the package versions and the number of active and other services, and `full`,
+the default, also each service and the state of the site-to-site, road-warrior, OpenVPN and
+WireGuard features. The Client IP is the address the request came from, through the trusted
+proxies, so a person can see the address the router sees. Nothing comes from the configuration.
+`/status` names its content, so clients such as manage-ui and the Router Manager show what it
+has. `vpn-router-setup` opens the
 port on both interfaces in UFW, so the choice of `web.listen` is made by the service alone, and
 writes the features and the facts it resolves to `/run/vpn-router/web.json`.