mivanchenko
644c99ee30
Sends a confirmation email (best-effort, fire-and-forget SMTP via mailer.py) on booking creation, with a manage-booking link embedding the ticket-2 signed token. Adds /manage/<token>, a stateless cancel/reschedule page that reuses the existing slot-picker against booking_api's create/cancel/reschedule API, distinguishing an invalid/expired link from an already-cancelled one. Sender address uses the client's own domain when configured, falling back to a mivanchenko.de address otherwise. Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
45 lines
1.1 KiB
Markdown
45 lines
1.1 KiB
Markdown
# Caddy rate limiting for `/book/*`, `/manage/*` and `/api/booking/*` (#17, #18)
|
|
|
|
Like every other homelab Caddy change (see `deploy/clients/new-client.sh`), there's no
|
|
Caddyfile tracked in this repo -- apply this by hand at `/etc/caddy/Caddyfile` on the host
|
|
and reload with `docker exec caddy caddy reload --config /etc/caddy/Caddyfile`.
|
|
|
|
Add, on the site block that proxies to `smb-crm` (e.g. `onboard.mivanchenko.de`, or wherever
|
|
`/book/`, `/manage/` and `/api/booking/` are routed):
|
|
|
|
```
|
|
handle /book/* {
|
|
rate_limit {
|
|
zone book_public {
|
|
key {remote_host}
|
|
events 20
|
|
window 1m
|
|
}
|
|
}
|
|
reverse_proxy smb-crm:8080
|
|
}
|
|
handle /manage/* {
|
|
rate_limit {
|
|
zone book_public {
|
|
key {remote_host}
|
|
events 20
|
|
window 1m
|
|
}
|
|
}
|
|
reverse_proxy smb-crm:8080
|
|
}
|
|
handle /api/booking/* {
|
|
rate_limit {
|
|
zone book_api {
|
|
key {remote_host}
|
|
events 30
|
|
window 1m
|
|
}
|
|
}
|
|
reverse_proxy smb-crm:8080
|
|
}
|
|
```
|
|
|
|
Requires Caddy built with the `caddy-ratelimit` plugin, as used for other per-IP
|
|
protections on this homelab.
|