makayabou/asg-server
1
0
Fork 0
mirror of https://github.com/makayabou/asg-server.git synced 2026-05-02 17:43:36 +02:00
Code Issues Packages Projects Releases Wiki Activity

[api] move devices registration rate limit to Traefik

Browse Source
This commit is contained in:
Aleksandr Soloshenko 2025-03-12 17:31:20 +07:00 committed by Aleksandr
parent 09eb17ea0a
commit fceb298744
2 changed files with 69 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

75
deployments/docker-swarm-terraform/main.tf
View File

@ -68,6 +68,32 @@ resource "docker_service" "app" {
label = "traefik.docker.network"
value = data.docker_network.proxy.name
}
#region rate-limit_5-per-1m Middleware
labels {
label = "traefik.http.middlewares.rate-limit_5-per-1m.ratelimit.average"
value = "5"
}
labels {
label = "traefik.http.middlewares.rate-limit_5-per-1m.ratelimit.period"
value = "1m"
}
labels {
label = "traefik.http.middlewares.rate-limit_5-per-1m.ratelimit.sourcecriterion.ipstrategy.depth"
value = "1"
}
#endregion
#region Add Prefix Middleware
labels {
label = "traefik.http.middlewares.${var.app-name}-new-addprefix.addprefix.prefix"
value = "/api"
}
#endregion
#region Deprecated
labels {
label = "traefik.http.routers.${var.app-name}.rule"
value = "Host(`${var.app-host}`) && PathPrefix(`/api`)"
@ -80,10 +106,31 @@ resource "docker_service" "app" {
label = "traefik.http.routers.${var.app-name}.tls.certresolver"
value = "le"
}
#endregion
#region Deprecated Limited
labels {
label = "traefik.http.middlewares.${var.app-name}-new-addprefix.addprefix.prefix"
value = "/api"
label = "traefik.http.routers.${var.app-name}_limited.rule"
value = "Host(`${var.app-host}`) && PathPrefix(`/api/mobile/v1/device`) && Method(`POST`)"
}
labels {
label = "traefik.http.routers.${var.app-name}_limited.middlewares"
value = "rate-limit_5-per-1m"
}
labels {
label = "traefik.http.routers.${var.app-name}_limited.entrypoints"
value = "https"
}
labels {
label = "traefik.http.routers.${var.app-name}_limited.tls.certresolver"
value = "le"
}
#endregion
#region Primary
labels {
label = "traefik.http.routers.${var.app-name}-new.rule"
value = "Host(`api.sms-gate.app`)"
}
labels {
label = "traefik.http.routers.${var.app-name}-new.entrypoints"
@ -93,14 +140,30 @@ resource "docker_service" "app" {
label = "traefik.http.routers.${var.app-name}-new.middlewares"
value = "${var.app-name}-new-addprefix"
}
labels {
label = "traefik.http.routers.${var.app-name}-new.rule"
value = "Host(`api.sms-gate.app`)"
}
labels {
label = "traefik.http.routers.${var.app-name}-new.tls.certresolver"
value = "le"
}
#endregion
#region Primary Limited
labels {
label = "traefik.http.routers.${var.app-name}-new_limited.rule"
value = "Host(`api.sms-gate.app`) && PathPrefix(`/mobile/v1/device`) && Method(`POST`)"
}
labels {
label = "traefik.http.routers.${var.app-name}-new_limited.entrypoints"
value = "https"
}
labels {
label = "traefik.http.routers.${var.app-name}-new_limited.middlewares"
value = "rate-limit_5-per-1m,${var.app-name}-new-addprefix"
}
labels {
label = "traefik.http.routers.${var.app-name}-new_limited.tls.certresolver"
value = "le"
}
#endregion
labels {
label = "traefik.http.services.${var.app-name}.loadbalancer.server.port"

2
internal/sms-gateway/handlers/mobile.go
View File

@ -19,7 +19,6 @@ import (
"github.com/go-playground/validator/v10"
"github.com/gofiber/fiber/v2"
"github.com/gofiber/fiber/v2/middleware/keyauth"
"github.com/gofiber/fiber/v2/middleware/limiter"
"github.com/jaevor/go-nanoid"
"go.uber.org/fx"
"go.uber.org/zap"
@ -232,7 +231,6 @@ func (h *mobileHandler) Register(router fiber.Router) {
router = router.Group("/mobile/v1")
router.Post("/device",
limiter.New(),
userauth.New(h.authSvc),
keyauth.New(keyauth.Config{
Next: func(c *fiber.Ctx) bool {