From 52ed3aff4f1860035952217b7bac3f09c9e0e46b Mon Sep 17 00:00:00 2001
From: Ada Conway <ada@conway.engineer>
Date: Wed, 19 Nov 2025 12:45:50 -0700
Subject: [PATCH] fix: set trusted proxies

---
 api/main.go | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/api/main.go b/api/main.go
index 2492874..71eba6f 100644
--- a/api/main.go
+++ b/api/main.go
@@ -71,6 +71,8 @@ func main() {
 
 	router := gin.Default()
 
+	router.SetTrustedProxies([]string{"127.0.0.1/32", "::1/128"})
+
 	store := cookie.NewStore([]byte(os.Getenv("COOKIE_SECRET")))
 	router.Use(sessions.Sessions("auth-session", store))