diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb index d0af0fe940..c30ac11b86 100644 --- a/config/initializers/rack_attack.rb +++ b/config/initializers/rack_attack.rb @@ -82,6 +82,10 @@ class Rack::Attack req.authenticated_user_id if req.post? && req.path.match?(%r{\A/api/v\d+/media\z}i) end + throttle('throttle_authenticated_media_proxy', limit: 100, period: 5.minutes) do |req| + req.authenticated_user_id if req.path.start_with?('/media_proxy') + end + throttle('throttle_media_proxy', limit: 30, period: 10.minutes) do |req| req.throttleable_remote_ip if req.path.start_with?('/media_proxy') end