productionalize api

cmd/ethereum/listener.go

@@ -50,7 +50,7 @@ func StartListener(cfg config.Config, logger log.Logger, processingQueue chan *t
 	}
 
 	logger.Info(fmt.Sprintf(
-		"Starting listener at block %d looking back %d blocks",
+		"Starting Ethereum listener at block %d looking back %d blocks",
 		cfg.Networks.Source.Ethereum.StartBlock,
 		cfg.Networks.Source.Ethereum.LookbackPeriod))
 

cmd/root.go

@@ -66,7 +66,15 @@ func init() {
 }
 
 func startApi() {
+	gin.SetMode(gin.ReleaseMode)
 	router := gin.Default()
+
+	err := router.SetTrustedProxies(Cfg.Api.TrustedProxies) // vpn.primary.strange.love
+	if err != nil {
+		Logger.Error("unable to set trusted proxies on API server: " + err.Error())
+		os.Exit(1)
+	}
+
 	router.GET("/tx/:txHash", getTxByHash)
 	router.Run("localhost:8000")
 }

config/config.go

@@ -43,8 +43,10 @@ type Config struct {
 		FetchRetries       int    `yaml:"fetch-retries"`
 		FetchRetryInterval int    `yaml:"fetch-retry-interval"`
 	} `yaml:"circle"`
-
 	ProcessorWorkerCount uint32 `yaml:"processor-worker-count"`
+	Api                  struct {
+		TrustedProxies []string `yaml:"trusted-proxies"`
+	} `yaml:"api"`
 }
 
 func Parse(file string) (cfg Config) {

config/sample-app-config.yaml

@@ -34,3 +34,6 @@ circle:
   fetch-retries: 10 # additional times to fetch an attestation
   fetch-retry-interval: 10 # time between retries in seconds
 processor-worker-count: 16
+api:
+  trusted-proxies:
+    - "1.2.3.4" # add trusted proxy IPs here