🚑 Fix forwarding IPs in docker container for security reasons

Fixes #16
piterpy-meetup · Mar 16, 2020 · fe777e3 · fe777e3
1 parent c0b3e1b
commit fe777e3
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/pyproject.toml b/pyproject.toml
@@ -1,6 +1,6 @@
 [tool.poetry]
 name = "ppm-telegram-bot"
-version = "0.1.7"
+version = "0.1.8"
 description = ""
 authors = ["Dima Boger <[email protected]>"]
 license = "MIT"

diff --git a/run-app.sh b/run-app.sh
@@ -3,4 +3,12 @@
 WORKERS_NUM=${1:-1}
 PORT=${2:-8000}
 
-exec 2>&1 gunicorn ppm_telegram_bot.api:app --workers=$WORKERS_NUM --worker-class=uvicorn.workers.UvicornWorker --bind=0.0.0.0:$PORT
+# see https://github.com/encode/uvicorn/issues/589
+export FORWARDED_ALLOW_IPS="*"
+
+exec 2>&1 gunicorn \
+  ppm_telegram_bot.api:app \
+  --forwarded-allow-ips="*" \
+  --workers=$WORKERS_NUM \
+  --worker-class=uvicorn.workers.UvicornWorker \
+  --bind=0.0.0.0:$PORT