prism/service/server
lone-cloud 37d745703c
security: remove RealIP middleware, tighten rate limiter defaults
- remove chi middleware.RealIP; deprecated in chi v5.3.0 due to IP spoofing
  vulnerabilities (GHSA-3fxj-6jh8-hvhx, GHSA-rjr7-jggh-pgcp, GHSA-9g5q-2w5x-hmxf)
- lower default RATE_LIMIT from 100 to 20 req/s per IP
- support RATE_LIMIT=0 to disable rate limiting entirely (for deployments behind
  a remote reverse proxy with its own rate limiting)
- fix incorrect .env.example comment (was 'per 15 minute window', is per second)
2026-05-23 18:37:55 -07:00
..
templates more minor UI nitpicks 2026-04-13 22:47:59 -07:00
handlers_apps.go code cleanups and refactors 2026-02-26 18:35:11 -08:00
handlers_fragment.go code cleanups and refactors 2026-02-26 18:35:11 -08:00
handlers_health.go code cleanups and refactors 2026-02-26 18:35:11 -08:00
handlers_integrations.go using biome for html/cs/js formatting and linting, simplify app to run with no services, re-implement proton and signal implementations to be much better, configure all integration in web UI instead of .env 2026-02-09 01:19:47 -08:00
handlers_ntfy.go dont need to truncate for logs 2026-04-15 09:16:22 -07:00
handlers_subscriptions.go code cleanups and refactors 2026-02-26 18:35:11 -08:00
middleware.go security: remove RealIP middleware, tighten rate limiter defaults 2026-05-23 18:37:55 -07:00
server.go security: remove RealIP middleware, tighten rate limiter defaults 2026-05-23 18:37:55 -07:00