From e0e55bf852b923265cd0d54a68e45cf885d0dd46 Mon Sep 17 00:00:00 2001 From: kisfenyo Date: Fri, 30 Oct 2026 10:57:52 +0100 Subject: [PATCH] manifests: contact-mailer-api publishes only /api/contact (Exact) and limits a client to 20 requests a minute --- manifests/contact-mailer.yaml | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/manifests/contact-mailer.yaml b/manifests/contact-mailer.yaml index 08b4dffc..f2657e1b 100644 --- a/manifests/contact-mailer.yaml +++ b/manifests/contact-mailer.yaml @@ -156,6 +156,9 @@ metadata: nginx.ingress.kubernetes.io/proxy-body-size: "25m" nginx.ingress.kubernetes.io/proxy-read-timeout: "60" nginx.ingress.kubernetes.io/proxy-send-timeout: "60" + # Only the form's one route is published here, and a client gets at most 20 requests a minute (the form sends a + # CORS preflight plus one POST per message). + nginx.ingress.kubernetes.io/limit-rpm: "20" spec: ingressClassName: nginx-internal tls: @@ -166,8 +169,8 @@ spec: - host: api.felhom.eu http: paths: - - path: /api - pathType: Prefix + - path: /api/contact + pathType: Exact backend: service: name: contact-mailer