Document some code

internal/api/block.go

@@ -21,6 +21,8 @@ type blocker struct {
 	status   int
 }
 
+// Prevent internal API responses intended for gitlab-workhorse from
+// leaking to the end user
 func (b *blocker) Header() http.Header {
 	return b.rw.Header()
 }

internal/api/secret.go

@@ -15,6 +15,9 @@ type Secret struct {
 	sync.RWMutex
 }
 
+// Lazy access to the HMAC secret key. We must be lazy because if the key
+// is not already there, it will be generated by gitlab-rails, and
+// gitlab-rails is slow.
 func (s *Secret) Bytes() ([]byte, error) {
 	if bytes := s.getBytes(); bytes != nil {
 		return bytes, nil