--- a/cubicweb/pyramid/pyramidctl.py	Wed May 08 21:30:44 2019 +0200
+++ b/cubicweb/pyramid/pyramidctl.py	Wed May 08 21:37:13 2019 +0200
@@ -388,7 +388,8 @@
             'anymore; use the standalone "scheduler" command if needed'
         )
         try:
-            waitress.serve(app, host=host, port=port, url_scheme=url_scheme)
+            waitress.serve(app, host=host, port=port, url_scheme=url_scheme,
+                           clear_untrusted_proxy_headers=True)
         finally:
             repo.shutdown()
         if self._needreload: