jeffemmett
/
rspace-online
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(security): add Traefik rate limit middleware labels 

Coarse edge defense: 120 req/min average, burst 30, applied to both
rspace-main and rspace-canvas routers. Layer 1 flood cap before
Hono-level per-IP tiered limiting.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
This commit is contained in:
Jeff Emmett 2026-04-13 13:31:06 -04:00
parent e78b768f04
commit 10e70ba132
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docker-compose.yml
View File

@ -169,6 +169,12 @@ services:
- "traefik.http.routers.rspace-rsocials.entrypoints=web"
- "traefik.http.routers.rspace-rsocials.priority=120"
- "traefik.http.routers.rspace-rsocials.service=rspace-online"
# Rate limiting middleware (coarse edge defense — token bucket per source)
- "traefik.http.middlewares.rspace-ratelimit.ratelimit.average=120"
- "traefik.http.middlewares.rspace-ratelimit.ratelimit.burst=30"
- "traefik.http.middlewares.rspace-ratelimit.ratelimit.period=1m"
- "traefik.http.routers.rspace-main.middlewares=rspace-ratelimit"
- "traefik.http.routers.rspace-canvas.middlewares=rspace-ratelimit"
# Service configuration
- "traefik.http.services.rspace-online.loadbalancer.server.port=3000"
- "traefik.docker.network=traefik-public"