manifests: contact-mailer-api publishes only /api/contact (Exact) and limits a client to 20 requests a minute

manifests/contact-mailer.yaml

@@ -156,6 +156,9 @@ metadata:
     nginx.ingress.kubernetes.io/proxy-body-size: "25m"
     nginx.ingress.kubernetes.io/proxy-read-timeout: "60"
     nginx.ingress.kubernetes.io/proxy-send-timeout: "60"
+    # Only the form's one route is published here, and a client gets at most 20 requests a minute (the form sends a
+    # CORS preflight plus one POST per message).
+    nginx.ingress.kubernetes.io/limit-rpm: "20"
 spec:
   ingressClassName: nginx-internal
   tls:
@@ -166,8 +169,8 @@ spec:
     - host: api.felhom.eu
       http:
         paths:
-          - path: /api
-            pathType: Prefix
+          - path: /api/contact
+            pathType: Exact
             backend:
               service:
                 name: contact-mailer