diff --git a/src/app.ts b/src/app.ts index 9ef0f70b..393cd995 100644 --- a/src/app.ts +++ b/src/app.ts @@ -178,7 +178,6 @@ const publicFiles = serveStatic({ root: './public/' }); const staticFiles = serveStatic({ root: './static/' }); app.use('*', cacheControlMiddleware({ noStore: true })); -app.use('*', rateLimitMiddleware(300, Time.minutes(5), false)); app.use('/api/*', metricsMiddleware, paginationMiddleware, logger(debug)); app.use('/.well-known/*', metricsMiddleware, logger(debug)); @@ -188,6 +187,12 @@ app.use('/oauth/*', metricsMiddleware, logger(debug)); app.get('/api/v1/streaming', metricsMiddleware, streamingController); app.get('/relay', metricsMiddleware, relayController); +app.use( + '*', + rateLimitMiddleware(30, Time.seconds(5), false), + rateLimitMiddleware(300, Time.minutes(5), false), +); + app.use( '*', cspMiddleware(),