secure with rack::attack

Author: cxspxr

config/initializers/rack_attack.rb

@@ -1,4 +1,16 @@
 class Rack::Attack
+  Rack::Attack.cache.store = ActiveSupport::Cache::MemoryStore.new
+
+  # 10 requests per 10 seconds for a single ip
+  throttle('req/ip', limit: 10, period: 10) do |req|
+    req.ip
+  end
+
+  # whitelist localhost
+  Rack::Attack::safelist('allow-localhost') do |req|
+  '127.0.0.1' == req.ip || '::1' == req.ip
+  end
+
   # response with 429
   self.throttled_response = ->(env) {
     retry_after = (env['rack.attack.match_data'] || {})[:period]
@@ -9,13 +21,3 @@ class Rack::Attack
     ]
   }
 end
-
-# 10 requests per 10 seconds for a single ip
-Rack::Attack::throttle('req/ip', limit: 10, period: 10) do |req|
-  req.ip
-end
-
-# whitelist localhost
-Rack::Attack::safelist('allow-localhost') do |req|
-'127.0.0.1' == req.ip || '::1' == req.ip
-end