mirror of
https://git.kescher.at/CatCatNya/catstodon.git
synced 2024-11-25 19:01:37 +01:00
allow localhost to bypass the ratelimit (#2554)
This commit is contained in:
parent
5135d609b7
commit
964035b118
1 changed files with 7 additions and 0 deletions
|
@ -1,6 +1,13 @@
|
|||
# frozen_string_literal: true
|
||||
|
||||
class Rack::Attack
|
||||
# Always allow requests from localhost
|
||||
# (blocklist & throttles are skipped)
|
||||
Rack::Attack.safelist('allow from localhost') do |req|
|
||||
# Requests are allowed if the return value is truthy
|
||||
'127.0.0.1' == req.ip || '::1' == req.ip
|
||||
end
|
||||
|
||||
# Rate limits for the API
|
||||
throttle('api', limit: 300, period: 5.minutes) do |req|
|
||||
req.ip if req.path =~ /\A\/api\/v/
|
||||
|
|
Loading…
Reference in a new issue