Release

.copilot/config.yml

@@ -1,4 +1,4 @@
 repository: export-opportunities
 builder:
   name: paketobuildpacks/builder-jammy-full
-  version: 0.3.397
+  version: 0.3.397

.copilot/image_build_run.sh

@@ -7,6 +7,8 @@ set -e
 
 rm ./config/application.yml
 
+cp -r /workspace/db/ /workspace/db-copy/
+
 rm -rf /workspace/tmp
 rm -rf /workspace/db
 rm -rf /workspace/log

Procfile

@@ -1,3 +1,3 @@
 web: bundle exec rake cf:on_first_instance db:migrate && bundle exec puma -p ${PORT:-3000}
-app: bundle exec rake cf:on_first_instance db:migrate && bundle exec rails assets:precompile && bundle exec puma -p ${PORT:-3000}
+app: cp -r /workspace/db-copy/* /workspace/db/ && bundle exec rake cf:on_first_instance db:migrate && bundle exec rails assets:precompile && bundle exec puma -p ${PORT:-3000}
 worker: bin/start-stunnel bundle exec sidekiq -C config/sidekiq.yml

app/controllers/api/activity_stream_controller.rb

@@ -316,11 +316,13 @@ def to_search_after(object, method)
       end
 
       def authenticate(request)
-        remote_ips = request.headers['X-Forwarded-For'].gsub(/\s+/, '').split(',')
-        return [false, 'Connecting from unauthorized IP'] unless remote_ips.length >= 2
-
-        authorized_ip_addresses = Figaro.env.ACTIVITY_STREAM_IP_WHITELIST.split(',')
-        return [false, 'Connecting from unauthorized IP'] unless authorized_ip_addresses.include?(remote_ips[-2])
+        unless ENV['COPILOT_ENVIRONMENT_NAME'] # DBT Platform
+          remote_ips = request.headers['X-Forwarded-For'].gsub(/\s+/, '').split(',')
+          return [false, 'Connecting from unauthorized IP'] unless remote_ips.length >= 2
+
+          authorized_ip_addresses = Figaro.env.ACTIVITY_STREAM_IP_WHITELIST.split(',')
+          return [false, 'Connecting from unauthorized IP'] unless authorized_ip_addresses.include?(remote_ips[-2])
+        end
 
         return [false, 'Authorization header is missing'] unless request.headers.key?('Authorization')