From dd17ba7107bc9ad2125891b099eb9d9eb0fd1199 Mon Sep 17 00:00:00 2001 From: Vinayak Mishra Date: Fri, 7 Aug 2026 17:31:17 +0545 Subject: [PATCH] docs(config): document the five unlisted env keys RATE_LIMIT_UPLOAD_* and the three ABOUT_ contact-copy keys were readable but absent from .env.example, so an operator had no way to discover them. --- .env.example | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/.env.example b/.env.example index 5078b40..568d1bb 100644 --- a/.env.example +++ b/.env.example @@ -102,6 +102,12 @@ ABOUT_LINKEDIN= ABOUT_MASTODON= ABOUT_WEBSITE= +# Contact section copy on /about. Defaults shown; override to change the wording +# without overriding the template. +ABOUT_REACH_HEADING=Reach out +ABOUT_EMAIL_HEADING=Email +ABOUT_EMAIL_INTRO=Or drop a line directly. + # ============================================================================= # CACHE CONFIGURATION # ============================================================================= @@ -142,6 +148,10 @@ RATE_LIMIT_GENERAL_WINDOW=900s RATE_LIMIT_CONTACT_REQUESTS=5 RATE_LIMIT_CONTACT_WINDOW=3600s +# Banner/image upload rate limiting (authenticated compose only) +RATE_LIMIT_UPLOAD_REQUESTS=20 +RATE_LIMIT_UPLOAD_WINDOW=300s + # Login rate limiting (brute-force protection; default 5 attempts per 15 min) # Configurable so an operator who fat-fingers their own password isn't hard-locked. RATE_LIMIT_LOGIN_REQUESTS=5