diff --git a/.env.example b/.env.example index efee18735..a97679f7e 100644 --- a/.env.example +++ b/.env.example @@ -199,7 +199,7 @@ ANDROID_SHA256_CERT_FINGERPRINT=AC:73:8E:DE:EB:56:EA:CC:10:87:02:A7:65:37:7B:38: ## Rack Attack configuration ## To prevent and throttle abusive requests # ENABLE_RACK_ATTACK=true -# RACK_ATTACK_IP_LIMIT=3000 +# RACK_ATTACK_LIMIT=300 # ENABLE_RACK_ATTACK_WIDGET_API=true ## Running chatwoot as an API only server diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb index d67c7facd..3c6b7611f 100644 --- a/config/initializers/rack_attack.rb +++ b/config/initializers/rack_attack.rb @@ -46,7 +46,7 @@ class Rack::Attack # # Key: "rack::attack:#{Time.now.to_i/:period}:req/ip:#{req.ip}" - throttle('req/ip', limit: ENV.fetch('RACK_ATTACK_LIMIT', 3000), period: 1.minute, &:ip) + throttle('req/ip', limit: ENV.fetch('RACK_ATTACK_LIMIT', '3000').to_i, period: 1.minute, &:ip) ###-----------------------------------------------### ###-----Authentication Related Throttling---------###