rate limiting

1 files changed, 6 insertions, 0 deletions

diff --git a/lib/app.js b/lib/app.js
index 4c4b7326..c1006455 100644
--- a/lib/app.js
+++ b/lib/app.js
@@ -19,6 +19,12 @@ const app = fastify({
   maxParamLength: 500,
 });
 
+await app.register(import("@fastify/rate-limit"), {
+  max: 50,
+  timeWindow: 5000,
+  keyGenerator: (req) => req.headers["cf-connecting-ip"],
+});
+
 app.register(fastifySecureSession, {
   key: Buffer.from(config.jwt, "hex"),
 });