oliver/StaySense
1
0
Fork 0
Code Issues 11 Pull requests Projects Releases Packages Wiki Activity Actions

docs: document endpoint rate limits and fail2ban alert log

Browse source
This commit is contained in:
Oliver 2026-02-15 13:48:34 +01:00
parent e5324edddf
commit 94cac9f467
No known key found for this signature in database
2 changed files with 18 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

4
docs/OPERATIONS.md
View file

@ -50,8 +50,12 @@ sudo systemctl restart staysense-api.service
## Hardening Snapshot
- API-Rate-Limit aktiv auf `/api/` (`limit_req zone=limit burst=20 nodelay`)
- Endpoint-spezifische Limits:
- `/api/spot/score`: `zone=staysense_score`, `burst=25`
- `/api/spot/signal`: `zone=staysense_signal`, `burst=3`
- Security Header aktiv im vHost (`CSP`, `X-Frame-Options`, `X-Content-Type-Options`, `Referrer-Policy`, `Permissions-Policy`)
- Fail2ban Jail aktiv:
- Name: `nginx-staysense-limitreq`
- Log: `/home/staysense-site/logs/nginx/error.log`
- Ban bei wiederholten Rate-Limit-Verstoessen
- Alarm-Log: `/var/log/staysense-security.log`