ali_mohaghegh/ERP
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat(hardening): login rate limiting, per-service memory limits, pinned images

Browse Source 
- slowapi limiter on POST /auth/login (10/min per IP, Persian error msg);
  edge-level coarse limits stay in Traefik
- mem_limit on every main-compose service (~4.4GB worst case, protects the
  8GB shared host during rebuilds)
- monitoring images pinned to verified tags (prom v3.4.1, grafana 11.6.3,
  loki/promtail 3.5.0, node-exporter v1.9.1, postgres-exporter v0.17.1,
  cadvisor v0.49.1); exporter image name fixed to postgres-exporter
This commit is contained in:
MMD
2026-09-18 22:27:59 +03:30
parent e5d6c77c3c
commit 32323565e6
6 changed files with 40 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files
backend/requirements.txt
+3
View File
@@ -17,3 +17,6 @@ bcrypt>=4.1.0
# Observability — metrics + Sentry/GlitchTip exception capture
prometheus-fastapi-instrumentator>=7.0.0
sentry-sdk[fastapi]>=2.0.0
# Rate limiting (login brute-force brake; edge limit lives in Traefik)
slowapi>=0.1.9