diff --git a/scripts/Caddyfile b/scripts/Caddyfile index 5f8d51e..c43edf7 100644 --- a/scripts/Caddyfile +++ b/scripts/Caddyfile @@ -51,25 +51,14 @@ yourdomain.com { } # Rate limiting for API endpoints (requires caddy-ratelimit plugin) - rate_limit { - zone api { - key {remote_host} - events 30 - window 1m - } - zone submit { - key {remote_host} - events 5 - window 1m - } - } - - # Apply rate limits to specific paths + # General API rate limiting: 30 requests per minute @api path /api/* - rate_limit @api api + rate_limit @api 30r/m - @submit path /api/locations method POST - rate_limit @submit submit + # Submission rate limiting: 5 requests per minute + @submit path /api/locations + @submit method POST + rate_limit @submit 5r/m } # Redirect www to non-www (with HTTPS)