better-ts-stack 2.0.2 → 2.1.1

package/templates/modules/prisma/tanstack/prisma.config.ts

@@ -1,5 +1,5 @@
 import "dotenv/config";
-import { defineConfig, env } from "prisma/config";
+import { defineConfig } from "prisma/config";
 
 export default defineConfig({
   schema: "prisma/schema.prisma",
@@ -7,6 +7,8 @@ export default defineConfig({
     path: "prisma/migrations",
   },
   datasource: {
-    url: env("DATABASE_URL"),
+    // prisma generate needs no URL, so a build without .env (CI, a host) works.
+    // Commands that connect report the empty URL
+    url: process.env.DATABASE_URL ?? "",
   },
 });

package/templates/modules/rate-limit/express/config.json

@@ -0,0 +1,12 @@
+{
+  "id": "rate-limit",
+  "name": "Rate limiting",
+  "description": "Per-IP request limits for Express with express-rate-limit",
+  "type": "feature",
+  "dependencies": {
+    "express-rate-limit": "^8.7.2"
+  },
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {}
+}

package/templates/modules/rate-limit/express/src/middleware/rateLimit.ts

@@ -0,0 +1,23 @@
+import { rateLimit } from "express-rate-limit";
+
+// Limits count requests per client IP. Behind a reverse proxy or load
+// balancer, set app.set("trust proxy", 1) so the real client IP is used.
+const FIFTEEN_MINUTES = 15 * 60 * 1000;
+
+// Every route: 100 requests per IP in 15 minutes. The health check is left out
+// because Docker and load balancers call it on a schedule
+export const apiLimiter = rateLimit({
+  windowMs: FIFTEEN_MINUTES,
+  limit: 100,
+  standardHeaders: "draft-8",
+  legacyHeaders: false,
+  skip: (req) => req.path === "/health",
+});
+
+// Sign-up and login: 10 attempts per IP in 15 minutes, against password guessing
+export const authLimiter = rateLimit({
+  windowMs: FIFTEEN_MINUTES,
+  limit: 10,
+  standardHeaders: "draft-8",
+  legacyHeaders: false,
+});

package/templates/modules/rate-limit/nestjs/config.json

@@ -0,0 +1,12 @@
+{
+  "id": "rate-limit",
+  "name": "Rate limiting",
+  "description": "Per-IP request limits for NestJS with @nestjs/throttler",
+  "type": "feature",
+  "dependencies": {
+    "@nestjs/throttler": "^6.7.1"
+  },
+  "devDependencies": {},
+  "scripts": {},
+  "envVars": {}
+}