diff --git a/admin_manual/configuration_server/config_sample_php_parameters.rst b/admin_manual/configuration_server/config_sample_php_parameters.rst index 83c8998e1..4ed377953 100644 --- a/admin_manual/configuration_server/config_sample_php_parameters.rst +++ b/admin_manual/configuration_server/config_sample_php_parameters.rst @@ -860,6 +860,35 @@ Disabling this is discouraged for security reasons. Defaults to ``true`` +ratelimit_overwrite +^^^^^^^^^^^^^^^^^^^ + + +:: + + 'ratelimit_overwrite' => [ + 'profile.profilepage.index' => [ + 'user' => ['limit' => 300, 'period' => 3600], + 'anon' => ['limit' => 1, 'period' => 300], + ] + ], + +Overwrite the individual rate limit for a specific route + +From time to time it can be necessary to extend the rate limit of a specific route, +depending on your usage pattern or when you script some actions. +Instead of completely disabling the rate limit or excluding an IP address from the +rate limit, the following config allows to overwrite the rate limit duration and period. + +The first level key is the name of the route. You can find the route name from a URL +using the ``occ router:list`` command of your server. + +You can also specify different limits for logged-in users with the ``user`` key +and not-logged-in users with the ``anon`` key. However, if there is no specific ``user`` limit, +the ``anon`` limit is also applied for logged-in users. + +Defaults to empty array ``[]`` + security.ipv6_normalized_subnet_size ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^