clawbot ad0714801c Limit each client's requests to the image routes (closes #236) ...

The new setting image_requests_per_minute (PIXA_IMAGE_REQUESTS_PER_MINUTE),
default 600, caps the GET and HEAD requests one client sends to /v1/image/
and /v1/e/ per minute; the next is answered 429 with Retry-After. It uses
the login limit's RateLimit middleware, so clients are told apart the same
way, and sits in the image routes' group behind the CORS middleware, so a
preflight is not counted. 0 turns it off; a negative or non-integer value
stops startup.

TestEnvironmentSetsEveryKey gains the new variable, under the owner's
standing approval in #64. To stay
within the linters' limits, the sentry_dsn check moves unchanged into
validateSentryDSN, and the cache_max_bytes explicit flag is set in one
line.

Model: opus-5-5

2026-10-12 09:14:44 +00:00

..

Caddyfile

Write the deployment guide and an example Caddy config (closes #89)

2026-10-04 15:08:03 +02:00

config.example.yml

Limit each client's requests to the image routes (closes #236)

2026-10-12 09:14:44 +00:00