Rate Limiting, IP Allowlists & a Request Audit Trail | LlamaPress Cookbook
LlamaPress
Sign in Upload
Cookbook
Auth Stable

Rate Limiting, IP Allowlists & a Request Audit Trail

Rack::Attack throttles for login brute-force and request floods, a trusted-IP safelist, an optional country allowlist, and a UserEvent audit log that records who did what from which IP. Includes the two silent failures that make throttling do nothing at all.

Proven on lohman.llamapress.ai model · controller · sql
JSON Raw .md

Related

Cookbook Two-Factor Authentication (TOTP) with Remember-This-Device The sibling security recipe — a second factor on the login endpoint this guide throttles. Link Rack::Attack Upstream docs for throttles, blocklists, safelists and Fail2Ban.