Had a global rate limit on 127.0.0.1 due to reverse proxy

Cargo.toml

···
 tracing-subscriber = { version = "0.3", features = ["env-filter", "fmt"] }
 hyper-util = { version = "0.1.16", features = ["client", "client-legacy"] }
 tower-http = { version = "0.6", features = ["cors", "compression-zstd"] }
-tower_governor = "0.8.0"
+tower_governor = { version = "0.8.0", features = ["axum", "tracing"] }
 hex = "0.4"
 jwt-compact = { version = "0.8.0", features = ["es256k"] }
 scrypt = "0.11"

README.md

···
                 path /xrpc/com.atproto.server.getSession
                 path /xrpc/com.atproto.server.updateEmail
                 path /xrpc/com.atproto.server.createSession
+                path /xrpc/com.atproto.server.createAccount
                 path /@atproto/oauth-provider/~api/sign-in
         }
 
         handle @gatekeeper {
-                reverse_proxy http://localhost:8080
+                reverse_proxy http://localhost:8080 {
+                #Makes sure the cloudflare ip is proxied and able to be picked up by pds gatekeeper
+			    header_up X-Forwarded-For {http.request.header.CF-Connecting-IP}
+		    }
         }
 
         reverse_proxy http://localhost:3000

justfile

···
     docker buildx build \
             --platform linux/arm64,linux/amd64 \
             --tag fatfingers23/pds_gatekeeper:latest \
-            --tag fatfingers23/pds_gatekeeper:0.1.0.2 \
+            --tag fatfingers23/pds_gatekeeper:0.1.0.3 \
             --push .

src/main.rs

···
 use std::{env, net::SocketAddr};
 use tower_governor::GovernorLayer;
 use tower_governor::governor::GovernorConfigBuilder;
+use tower_governor::key_extractor::SmartIpKeyExtractor;
 use tower_http::compression::CompressionLayer;
 use tower_http::cors::{Any, CorsLayer};
 use tracing::log;
···
     let create_session_governor_conf = GovernorConfigBuilder::default()
         .per_second(60)
         .burst_size(5)
+        .key_extractor(SmartIpKeyExtractor)
         .finish()
         .expect("failed to create governor config for create session. this should not happen and is a bug");
 
···
     let sign_in_governor_conf = GovernorConfigBuilder::default()
         .per_second(60)
         .burst_size(5)
+        .key_extractor(SmartIpKeyExtractor)
         .finish()
         .expect(
             "failed to create governor config for sign in. this should not happen and is a bug",
···
         create_account_governor_conf.burst_size(burst);
     }
 
-    let create_account_governor_conf = create_account_governor_conf.finish().expect(
+    let create_account_governor_conf = create_account_governor_conf
+        .key_extractor(SmartIpKeyExtractor)
+        .finish().expect(
         "failed to create governor config for create account. this should not happen and is a bug",
     );