Jakub Zych cab1b9aef4 fix: document that the frontend server must be a trusted proxy for the public buckets (WR-15) ...

The resolve and 404 buckets key on the client IP, which is the SSR
server's address unless it is in http.trusted_proxies and forwards
X-Forwarded-For; otherwise they cap the whole site at 600 requests a
minute. The README and the Buckets comment now say so. An authenticated,
unthrottled resolve call would need a new token and a framework way to
skip a bucket, so it is left for a decision.

2026-10-27 15:34:01 +01:00

5.2 KiB

Raw Blame History

View Raw