From e2757ae6769758da766c7729f4b444a02414ecd0 Mon Sep 17 00:00:00 2001
From: Tobi Smethurst <31960611+tsmethurst@users.noreply.github.com>
Date: Mon, 26 Jul 2021 16:15:36 +0200
Subject: add trusted proxy for parsing client IPs (#115)

---
 internal/router/router.go | 5 +++++
 1 file changed, 5 insertions(+)

(limited to 'internal/router/router.go')

diff --git a/internal/router/router.go b/internal/router/router.go
index 64d7267be..c5f105448 100644
--- a/internal/router/router.go
+++ b/internal/router/router.go
@@ -122,6 +122,11 @@ func New(cfg *config.Config, db db.DB, logger *logrus.Logger) (Router, error) {
 	engine := gin.Default()
 	engine.MaxMultipartMemory = 8 << 20 // 8 MiB
 
+	// set up IP forwarding via x-forward-* headers.
+	if err := engine.SetTrustedProxies(cfg.TrustedProxies); err != nil {
+		return nil, err
+	}
+
 	// enable cors on the engine
 	if err := useCors(cfg, engine); err != nil {
 		return nil, err
-- 
cgit v1.2.3