feat(bootstrap): configurable HOST, CORS_ORIGINS, and optional rate limiting

2026-05-14 15:37:38 +02:00
parent 9b47779e63
commit 38b4774a63
4 changed files with 74 additions and 6 deletions
--- a/.env.example
+++ b/.env.example
@@ -10,6 +10,13 @@ BASE_URL=http://localhost:3000
 # Optional
 HOST=0.0.0.0
 PORT=3000
+
+# CORS — comma-separated allowed origins, or * for permissive (default: *)
+CORS_ORIGINS=*
+# CORS_ORIGINS=https://your-nextjs-app.example.com
+
+# Rate limiting — max requests per minute per IP (disabled by default)
+# RATE_LIMIT=60
 ALLOW_REGISTRATION=true   # set to false to disable new sign-ups
 RUST_ENV=development      # set to "production" to disable AP debug mode