Prevents abuse before exposing the app publicly. Limits each client IP to 20 article sends per hour. trust proxy is set so the real client IP is used (not Nginx's loopback) once the app is behind a reverse proxy.