From 80bff25af9b4914e891d6b1a3f8c56d7c44f1fde Mon Sep 17 00:00:00 2001
From: Sami <sami@dashcaddy.net>
Date: Tue, 31 Mar 2026 23:26:30 -0700
Subject: [PATCH] fix: increase general rate limit from 100 to 1000 per 15min

100 requests/15min was far too low for a dashboard with auto-refresh
polling every 10-30 seconds, causing 429s on TOTP config, site config,
license status and other endpoints after ~3 minutes of normal use.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 dashcaddy-api/constants.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/dashcaddy-api/constants.js b/dashcaddy-api/constants.js
index 207c618..02ce109 100644
--- a/dashcaddy-api/constants.js
+++ b/dashcaddy-api/constants.js
@@ -69,7 +69,7 @@ const SESSION_TTL = {
 const RATE_LIMITS = {
   GENERAL: {
     windowMs: 15 * 60 * 1000,   // 15 minutes
-    max: 100,
+    max: 1000,
   },
   STRICT: {
     windowMs: 15 * 60 * 1000,