Merge pull request #1351 from rubymonsters/1346-refine-rack-attack-se…

…ttings

Reduce requests to 1 per second per IP

config/initializers/rack_attack.rb

@@ -24,7 +24,7 @@ class Rack::Attack
   # Throttle all requests by IP (60rpm)
   #
   # Key: "rack::attack:#{Time.now.to_i/:period}:req/ip:#{req.ip}"
-  throttle('req/ip', limit: 300, period: 3.minutes) do |req|
+  throttle('req/ip', limit: 60, period: 60.seconds) do |req|
     req.ip # unless req.path.start_with?('/assets')
   end