@rpcbase/server 0.179.0 → 0.181.0

package/express/index.js

@@ -17,6 +17,11 @@ const log = debug("rb:server")
 const is_production = process.env.IS_PRODUCTION === "yes"
 const {APP_DOMAIN, CLIENT_PORT} = process.env
 
+// TODO: document this
+// we could have a larger size, but it's good practice to keep it small to prevent body upload ddos attacks
+const BODY_MAX_SIZE_MB = 8
+
+
 log("server is production:", JSON.stringify(is_production))
 
 module.exports = () => {
@@ -24,7 +29,7 @@ module.exports = () => {
 
   app.use(request_ip.mw())
 
-  app.use(body_parser.json({limit: "2mb"}))
+  app.use(body_parser.json({limit: `${BODY_MAX_SIZE_MB}mb`}))
 
   app.set("trust proxy", 1)
 
@@ -81,8 +86,8 @@ module.exports = () => {
 
   app.use(session_middleware)
 
-  app.get("/api/ping", (req, res) => res.json({message: "pong"}))
-  app.post("/api/ping", (req, res) => res.json({message: "pong"}))
+  app.get("__/ping", (req, res) => res.json({message: "pong"}))
+  app.post("__/ping", (req, res) => res.json({message: "pong"}))
 
   auth(app)
 

package/infrastructure/redis/redis.conf

@@ -501,7 +501,7 @@ rdb-del-sync-files no
 # The Append Only File will also be created inside this directory.
 #
 # Note that you must specify a directory here, not a file name.
-dir ./
+#dir ./
 
 ################################# REPLICATION #################################
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rpcbase/server",
-  "version": "0.179.0",
+  "version": "0.181.0",
   "license": "SSPL-1.0",
   "main": "./index.js",
   "bin": {