feat(api): add IP ban exemptions (#1448)

packages/config/src/ConfigLoader.ts

@@ -91,6 +91,7 @@ function defaultConfig(): MasterConfig {
 		services: {
 			api: {
 				port: 8080,
+				ip_ban_exempt_ips: [],
 				presigned_attachment_uploads_enabled: false,
 				unfurl_ignored_hosts: [],
 				embeds: {

packages/config/src/MasterConfig.ts

@@ -82,6 +82,7 @@ export interface MasterConfig {
 	services: {
 		api: {
 			port: number;
+			ip_ban_exempt_ips: Array<string>;
 			presigned_attachment_uploads_enabled: boolean;
 			unfurl_ignored_hosts: Array<string>;
 			embeds: {

packages/config/src/config_loader/EnvironmentOverrides.ts

@@ -70,6 +70,7 @@ const NAMED_FLUXER_ENV_OVERRIDES: Record<string, NamedEnvOverride> = {
 	FLUXER_NATS_JETSTREAM_URL: {path: ['services', 'nats', 'jetstream_url']},
 	FLUXER_NATS_AUTH_TOKEN: {path: ['services', 'nats', 'auth_token']},
 	FLUXER_API_PORT: {path: ['services', 'api', 'port'], parse: parseEnvValue},
+	FLUXER_API_IP_BAN_EXEMPT_IPS: {path: ['services', 'api', 'ip_ban_exempt_ips'], parse: parseCsv},
 	FLUXER_API_PRESIGNED_ATTACHMENT_UPLOADS_ENABLED: {
 		path: ['services', 'api', 'presigned_attachment_uploads_enabled'],
 		parse: parseEnvValue,