You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
This commit was created on GitHub.com and signed with GitHub’s verified signature.
Fixed
Limiter had no socket/connect timeout on its Redis backend. Since the
rate limiter runs as a before_request hook for every route (not just /login), a Redis instance that's up but not responding (network
stall, overload) would hang every Gunicorn worker indefinitely on any
request. Added a 2s socket_timeout/socket_connect_timeout.
Security
Default Docker Compose stack now includes Redis and uses RATELIMIT_STORAGE_URI=redis://redis:6379/0 so the /login rate limit is
shared across Gunicorn workers instead of allowing 5 × worker_count
attempts per minute with in-memory storage