underpost 3.0.0 → 3.0.2

package/src/cli/cluster.js

@@ -37,7 +37,6 @@ class UnderpostCluster {
      * @param {boolean} [options.postgresql=false] - Deploy PostgreSQL.
      * @param {boolean} [options.valkey=false] - Deploy Valkey.
      * @param {boolean} [options.ipfs=false] - Deploy ipfs-cluster statefulset.
-     * @param {boolean} [options.full=false] - Deploy a full set of common components.
      * @param {boolean} [options.info=false] - Display extensive Kubernetes cluster information.
      * @param {boolean} [options.certManager=false] - Deploy Cert-Manager for certificate management.
      * @param {boolean} [options.listPods=false] - List Kubernetes pods.
@@ -75,7 +74,6 @@ class UnderpostCluster {
         postgresql: false,
         valkey: false,
         ipfs: false,
-        full: false,
         info: false,
         certManager: false,
         listPods: false,
@@ -102,26 +100,22 @@ class UnderpostCluster {
         replicas: '',
       },
     ) {
-      // Handles initial host setup (installing docker, podman, kind, kubeadm, helm)
-      if (options.initHost === true) return Underpost.cluster.initHost();
+      if (options.initHost) return Underpost.cluster.initHost();
 
-      // Handles initial host setup (installing docker, podman, kind, kubeadm, helm)
-      if (options.uninstallHost === true) return Underpost.cluster.uninstallHost();
+      if (options.uninstallHost) return Underpost.cluster.uninstallHost();
 
-      // Applies general host configuration (SELinux, containerd, sysctl)
-      if (options.config === true) return Underpost.cluster.config();
+      if (options.config) return Underpost.cluster.config();
 
-      // Sets up kubectl configuration for the current user
-      if (options.chown === true) return Underpost.cluster.chown();
+      if (options.chown) return Underpost.cluster.chown();
 
       const npmRoot = getNpmRootPath();
-      const underpostRoot = options?.dev === true ? '.' : `${npmRoot}/underpost`;
+      const underpostRoot = options.dev ? '.' : `${npmRoot}/underpost`;
 
-      if (options.listPods === true) return console.table(Underpost.deploy.get(podName ?? undefined));
+      if (options.listPods) return console.table(Underpost.deploy.get(podName ?? undefined));
       // Set default namespace if not specified
       if (!options.namespace) options.namespace = 'default';
 
-      if (options.nsUse && typeof options.nsUse === 'string') {
+      if (options.nsUse) {
         // Verify if namespace exists, create if not
         const namespaceExists = shellExec(`kubectl get namespace ${options.nsUse} --ignore-not-found -o name`, {
           stdout: true,
@@ -142,8 +136,8 @@ class UnderpostCluster {
       }
 
       // Reset Kubernetes cluster components (Kind/Kubeadm/K3s) and container runtimes
-      if (options.reset === true) {
-        const clusterType = options.k3s === true ? 'k3s' : options.kubeadm === true ? 'kubeadm' : 'kind';
+      if (options.reset) {
+        const clusterType = options.k3s ? 'k3s' : options.kubeadm ? 'kubeadm' : 'kind';
         return await Underpost.cluster.safeReset({
           underpostRoot,
           removeVolumeHostPaths: options.removeVolumeHostPaths,
@@ -160,7 +154,7 @@ class UnderpostCluster {
       // --- Kubeadm/Kind/K3s Cluster Initialization ---
       if (!alreadyKubeadmCluster && !alreadyKindCluster && !alreadyK3sCluster) {
         Underpost.cluster.config();
-        if (options.k3s === true) {
+        if (options.k3s) {
           logger.info('Initializing K3s control plane...');
           // Install K3s
           logger.info('Installing K3s...');
@@ -172,7 +166,7 @@ class UnderpostCluster {
           logger.info('Waiting for K3s to be ready...');
           shellExec(`sudo systemctl is-active --wait k3s || sudo systemctl wait --for=active k3s.service`);
           logger.info('K3s service is active.');
-        } else if (options.kubeadm === true) {
+        } else if (options.kubeadm) {
           logger.info('Initializing Kubeadm control plane...');
           // Set default values if not provided
           const podNetworkCidr = options.podNetworkCidr || '192.168.0.0/16';
@@ -208,7 +202,7 @@ class UnderpostCluster {
           logger.info('Initializing Kind cluster...');
           shellExec(
             `cd ${underpostRoot}/manifests && kind create cluster --config kind-config${
-              options?.dev === true ? '-dev' : ''
+              options.dev ? '-dev' : ''
             }.yaml`,
           );
           Underpost.cluster.chown('kind'); // Pass 'kind' to chown
@@ -218,14 +212,12 @@ class UnderpostCluster {
       // --- Optional Component Deployments (Databases, Ingress, Cert-Manager) ---
       // These deployments happen after the base cluster is up.
 
-      if (options.full === true || options.dedicatedGpu === true) {
+      if (options.dedicatedGpu) {
         shellExec(`node ${underpostRoot}/bin/deploy nvidia-gpu-operator`);
-        shellExec(
-          `node ${underpostRoot}/bin/deploy kubeflow-spark-operator${options.kubeadm === true ? ' kubeadm' : ''}`,
-        );
+        shellExec(`node ${underpostRoot}/bin/deploy kubeflow-spark-operator${options.kubeadm ? ' kubeadm' : ''}`);
       }
 
-      if (options.grafana === true) {
+      if (options.grafana) {
         shellExec(`kubectl delete deployment grafana -n ${options.namespace} --ignore-not-found`);
         shellExec(`kubectl apply -k ${underpostRoot}/manifests/grafana -n ${options.namespace}`);
         const yaml = `${fs
@@ -238,7 +230,7 @@ EOF
 `);
       }
 
-      if (options.prom && typeof options.prom === 'string') {
+      if (options.prom) {
         shellExec(`kubectl delete deployment prometheus --ignore-not-found`);
         shellExec(`kubectl delete configmap prometheus-config --ignore-not-found`);
         shellExec(`kubectl delete service prometheus --ignore-not-found`);
@@ -257,8 +249,8 @@ EOF
 `);
       }
 
-      if (options.full === true || options.valkey === true) {
-        if (options.pullImage === true) Underpost.cluster.pullImage('valkey/valkey:latest', options);
+      if (options.valkey) {
+        if (options.pullImage) Underpost.cluster.pullImage('valkey/valkey:latest', options);
         shellExec(`kubectl delete statefulset valkey-service -n ${options.namespace} --ignore-not-found`);
         shellExec(`kubectl apply -k ${underpostRoot}/manifests/valkey -n ${options.namespace}`);
         await Underpost.test.statusMonitor('valkey-service', 'Running', 'pods', 1000, 60 * 10);
@@ -266,17 +258,17 @@ EOF
       if (options.ipfs) {
         await Underpost.ipfs.deploy(options, underpostRoot);
       }
-      if (options.full === true || options.mariadb === true) {
+      if (options.mariadb) {
         shellExec(
           `sudo kubectl create secret generic mariadb-secret --from-file=username=/home/dd/engine/engine-private/mariadb-username --from-file=password=/home/dd/engine/engine-private/mariadb-password --dry-run=client -o yaml | kubectl apply -f - -n ${options.namespace}`,
         );
         shellExec(`kubectl delete statefulset mariadb-statefulset -n ${options.namespace} --ignore-not-found`);
 
-        if (options.pullImage === true) Underpost.cluster.pullImage('mariadb:latest', options);
+        if (options.pullImage) Underpost.cluster.pullImage('mariadb:latest', options);
         shellExec(`kubectl apply -f ${underpostRoot}/manifests/mariadb/storage-class.yaml -n ${options.namespace}`);
         shellExec(`kubectl apply -k ${underpostRoot}/manifests/mariadb -n ${options.namespace}`);
       }
-      if (options.full === true || options.mysql === true) {
+      if (options.mysql) {
         shellExec(
           `sudo kubectl create secret generic mysql-secret --from-file=username=/home/dd/engine/engine-private/mysql-username --from-file=password=/home/dd/engine/engine-private/mysql-password --dry-run=client -o yaml | kubectl apply -f - -n ${options.namespace}`,
         );
@@ -285,15 +277,15 @@ EOF
         shellExec(`sudo chown -R $(whoami):$(whoami) /mnt/data`);
         shellExec(`kubectl apply -k ${underpostRoot}/manifests/mysql -n ${options.namespace}`);
       }
-      if (options.full === true || options.postgresql === true) {
-        if (options.pullImage === true) Underpost.cluster.pullImage('postgres:latest', options);
+      if (options.postgresql) {
+        if (options.pullImage) Underpost.cluster.pullImage('postgres:latest', options);
         shellExec(
           `sudo kubectl create secret generic postgres-secret --from-file=password=/home/dd/engine/engine-private/postgresql-password --dry-run=client -o yaml | kubectl apply -f - -n ${options.namespace}`,
         );
         shellExec(`kubectl apply -k ${underpostRoot}/manifests/postgresql -n ${options.namespace}`);
       }
-      if (options.mongodb4 === true) {
-        if (options.pullImage === true) Underpost.cluster.pullImage('mongo:4.4', options);
+      if (options.mongodb4) {
+        if (options.pullImage) Underpost.cluster.pullImage('mongo:4.4', options);
         shellExec(`kubectl apply -k ${underpostRoot}/manifests/mongodb-4.4 -n ${options.namespace}`);
 
         const deploymentName = 'mongodb-deployment';
@@ -314,8 +306,8 @@ EOF
         --eval 'rs.initiate(${JSON.stringify(mongoConfig)})'`,
           );
         }
-      } else if (options.full === true || options.mongodb === true) {
-        if (options.pullImage === true) Underpost.cluster.pullImage('mongo:latest', options);
+      } else if (options.mongodb) {
+        if (options.pullImage) Underpost.cluster.pullImage('mongo:latest', options);
         shellExec(
           `sudo kubectl create secret generic mongodb-keyfile --from-file=/home/dd/engine/engine-private/mongodb-keyfile --dry-run=client -o yaml | kubectl apply -f - -n ${options.namespace}`,
         );
@@ -344,11 +336,11 @@ EOF
         }
       }
 
-      if (options.full === true || options.contour === true) {
+      if (options.contour) {
         shellExec(
           `kubectl apply -f https://cdn.jsdelivr.net/gh/projectcontour/contour@release-1.33/examples/render/contour.yaml`,
         );
-        if (options.kubeadm === true) {
+        if (options.kubeadm) {
           // Envoy service might need NodePort for kubeadm
           shellExec(
             `sudo kubectl apply -f ${underpostRoot}/manifests/envoy-service-nodeport.yaml -n ${options.namespace}`,
@@ -358,7 +350,7 @@ EOF
         // so a specific NodePort service might not be needed or can be configured differently.
       }
 
-      if (options.full === true || options.certManager === true) {
+      if (options.certManager) {
         if (!Underpost.deploy.get('cert-manager').find((p) => p.STATUS === 'Running')) {
           shellExec(`helm repo add jetstack https://charts.jetstack.io --force-update`);
           shellExec(

package/src/cli/index.js

@@ -218,7 +218,6 @@ program
   .option('--contour', 'Initializes the cluster with Project Contour base HTTPProxy and Envoy.')
   .option('--cert-manager', "Initializes the cluster with a Let's Encrypt production ClusterIssuer.")
   .option('--dedicated-gpu', 'Initializes the cluster with dedicated GPU base resources and environment settings.')
-  .option('--full', 'Initializes the cluster with all available statefulsets and services.')
   .option(
     '--ns-use <ns-name>',
     "Switches the current Kubernetes context to the specified namespace (creates if it doesn't exist).",

package/src/cli/lxd.js

@@ -344,7 +344,7 @@ ipv6.address=none`);
         }
         case 'dev-reset': {
           shellExec(
-            `lxc exec ${vmName} -- bash -lc 'cd /home/dd/engine && node bin cluster --dev --reset && node bin cluster --dev --k3s'`,
+            `lxc exec ${vmName} -- bash -lc 'cd /home/dd/engine && node bin cluster --dev --reset --k3s && node bin cluster --dev --k3s'`,
           );
           break;
         }

package/src/cli/run.js

@@ -217,6 +217,20 @@ class UnderpostRun {
       }
     },
 
+    /**
+     * @method ipfs-expose
+     * @description Exposes IPFS Cluster services on specified ports for local access.
+     * @type {Function}
+     * @memberof UnderpostRun
+     */
+    'ipfs-expose': (path, options = DEFAULT_OPTION) => {
+      const ports = [5001, 9094, 8080];
+      for (const port of ports)
+        shellExec(`node bin deploy --expose ipfs-cluster --expose-port ${port} --disable-update-underpost-config`, {
+          async: true,
+        });
+    },
+
     /**
      * @method metadata
      * @description Generates metadata for the specified path after exposing the development cluster.
@@ -1148,7 +1162,7 @@ EOF
       const baseClusterCommand = options.dev ? ' --dev' : '';
       const clusterType = options.k3s ? 'k3s' : 'kubeadm';
       shellCd(`/home/dd/engine`);
-      shellExec(`${baseCommand} cluster${baseClusterCommand} --reset`);
+      shellExec(`${baseCommand} cluster${baseClusterCommand} --reset --${clusterType}`);
       await timer(5000);
       shellExec(`${baseCommand} cluster${baseClusterCommand} --${clusterType}`);
       await timer(5000);
@@ -1779,8 +1793,9 @@ EOF
      * @memberof UnderpostRun
      */
     'gpu-env': (path, options = DEFAULT_OPTION) => {
+      const clusterType = 'kubeadm';
       shellExec(
-        `node bin cluster --dev --reset && node bin cluster --dev --dedicated-gpu --kubeadm && kubectl get pods --all-namespaces -o wide -w`,
+        `node bin cluster --dev --reset --${clusterType} && node bin cluster --dev --dedicated-gpu --${clusterType} && kubectl get pods --all-namespaces -o wide -w`,
       );
     },
     /**

package/src/client/components/core/Docs.js

@@ -1,9 +1,9 @@
 import { Badge } from './Badge.js';
 import { BtnIcon } from './BtnIcon.js';
-import { Css, renderCssAttr, simpleIconsRender, ThemeEvents, Themes } from './Css.js';
+import { Css, darkTheme, renderCssAttr, simpleIconsRender, ThemeEvents, Themes } from './Css.js';
 import { buildBadgeToolTipMenuOption, Modal, renderViewTitle } from './Modal.js';
 import { listenQueryPathInstance, setQueryPath, closeModalRouteChangeEvent, getProxyPath } from './Router.js';
-import { htmls, s } from './VanillaJs.js';
+import { htmls, s, sIframe } from './VanillaJs.js';
 
 // https://mintlify.com/docs/quickstart
 
@@ -39,6 +39,7 @@ const Docs = {
       RouterInstance: Modal.Data['modal-docs'].options.RouterInstance,
     });
     const iframeEl = s(`.iframe-${ModalId}`);
+    let swaggerThemeEventKey = null;
     if (iframeEl) {
       iframeEl.addEventListener('load', () => {
         try {
@@ -51,7 +52,95 @@ const Docs = {
           // cross-origin or security restriction — safe to ignore
         }
         window.scrollTo(0, 0);
+        // Bind Shift+K inside the iframe to focus the parent SearchBox (mirrors app-wide shortcut)
+        try {
+          const iframeDoc = iframeEl.contentDocument || iframeEl.contentWindow?.document;
+          if (iframeDoc) {
+            iframeDoc.addEventListener('keydown', (e) => {
+              if (e.shiftKey && e.key.toLowerCase() === 'k') {
+                e.preventDefault();
+                e.stopPropagation();
+                if (s(`.top-bar-search-box`)) {
+                  if (s(`.main-body-btn-ui-close`) && s(`.main-body-btn-ui-close`).classList.contains('hide')) {
+                    s(`.main-body-btn-ui-open`).click();
+                  }
+                  s(`.top-bar-search-box`).blur();
+                  s(`.top-bar-search-box`).focus();
+                  s(`.top-bar-search-box`).select();
+                }
+              }
+            });
+          }
+        } catch (e) {
+          // cross-origin or security restriction — safe to ignore
+        }
       });
+
+      if (type === 'src') {
+        swaggerThemeEventKey = `jsdocs-iframe-${ModalId}`;
+
+        const applyJsDocsTheme = (isDark) => {
+          try {
+            const iframeWin = iframeEl.contentWindow;
+            if (!iframeWin) return;
+            const theme = isDark ? 'dark' : 'light';
+            if (typeof iframeWin.updateTheme === 'function') {
+              // clean-jsdoc-theme exposes updateTheme() globally
+              iframeWin.updateTheme(theme);
+            } else {
+              // Fallback: replicate localUpdateTheme manually
+              const iframeDoc = iframeEl.contentDocument || iframeWin.document;
+              if (!iframeDoc || !iframeDoc.body) return;
+              iframeDoc.body.setAttribute('data-theme', theme);
+              iframeDoc.body.classList.remove('dark', 'light');
+              iframeDoc.body.classList.add(theme);
+              const iconID = isDark ? '#light-theme-icon' : '#dark-theme-icon';
+              const svgUses = sIframe(iframeEl, '.theme-svg-use') ? iframeDoc.querySelectorAll('.theme-svg-use') : [];
+              svgUses.forEach((svg) => svg.setAttribute('xlink:href', iconID));
+              iframeWin.localStorage?.setItem('theme', theme);
+            }
+          } catch (e) {
+            // cross-origin or security restriction — safe to ignore
+          }
+        };
+
+        // Apply current theme as soon as the iframe content is ready
+        iframeEl.addEventListener('load', () => applyJsDocsTheme(darkTheme));
+
+        // Keep in sync whenever the parent page theme changes
+        ThemeEvents[swaggerThemeEventKey] = () => {
+          if (s(`.iframe-${ModalId}`)) applyJsDocsTheme(darkTheme);
+        };
+      }
+
+      if (type === 'api') {
+        swaggerThemeEventKey = `swagger-iframe-${ModalId}`;
+
+        const applySwaggerTheme = (isDark) => {
+          try {
+            const iframeDoc = iframeEl.contentDocument || iframeEl.contentWindow?.document;
+            if (!iframeDoc || !iframeDoc.body) return;
+            if (isDark) {
+              iframeDoc.body.classList.add('swagger-dark');
+            } else {
+              iframeDoc.body.classList.remove('swagger-dark');
+            }
+            iframeEl.contentWindow?.localStorage?.setItem('swagger-theme', isDark ? 'dark' : 'light');
+            const toggleBtn = sIframe(iframeEl, '#swagger-theme-toggle');
+            if (toggleBtn) toggleBtn.textContent = isDark ? '\u2600\uFE0F Light Mode' : '\uD83C\uDF19 Dark Mode';
+          } catch (e) {
+            // cross-origin or security restriction — safe to ignore
+          }
+        };
+
+        // Apply current theme as soon as the iframe content is ready
+        iframeEl.addEventListener('load', () => applySwaggerTheme(darkTheme));
+
+        // Keep in sync whenever the parent page theme changes
+        ThemeEvents[swaggerThemeEventKey] = () => {
+          if (s(`.iframe-${ModalId}`)) applySwaggerTheme(darkTheme);
+        };
+      }
     }
     Modal.Data[ModalId].onObserverListener[ModalId] = () => {
       if (s(`.iframe-${ModalId}`)) {
@@ -67,6 +156,7 @@ const Docs = {
     };
     Modal.Data[ModalId].onObserverListener[ModalId]();
     Modal.Data[ModalId].onCloseListener[ModalId] = () => {
+      if (swaggerThemeEventKey) delete ThemeEvents[swaggerThemeEventKey];
       closeModalRouteChangeEvent({ closedId: ModalId });
     };
   },
@@ -342,10 +432,6 @@ const Docs = {
         <div class="docs-landing">
           <div class="docs-header">
             <h1>Documentation</h1>
-            <p>
-              Find everything you need to build amazing applications with our platform. Get started with our guides, API
-              reference, and examples.
-            </p>
             <!--
                     <div class="search-bar">
                       <i class="fas fa-search"></i>

package/src/client/components/core/LoadingAnimation.js

@@ -27,8 +27,8 @@ const LoadingAnimation = {
                 ? subThemeManager.darkColor
                 : `#66e400`
               : subThemeManager.lightColor
-              ? subThemeManager.lightColor
-              : `#157e00`};"
+                ? subThemeManager.lightColor
+                : `#157e00`};"
           ></div>
         `,
       );
@@ -131,7 +131,6 @@ const LoadingAnimation = {
     if (!backgroundContainer) backgroundContainer = '.ssr-background';
     if (s(backgroundContainer)) {
       s(backgroundContainer).style.display = 'none';
-      if (s(`.main-body-btn-container`)) s(`.main-body-btn-container`).classList.remove('hide');
       if (callBack) callBack();
     }
   },

package/src/client/components/core/Modal.js

@@ -322,7 +322,7 @@ const Modal = {
                 'body',
                 html`
                   <div
-                    class="abs main-body-btn-container hide"
+                    class="abs main-body-btn-container"
                     style="top: ${options.heightTopBar + 50}px; z-index: 9; ${true ||
                     (options.mode && options.mode.match('right'))
                       ? 'right'

package/src/client/components/core/VanillaJs.js

@@ -418,12 +418,48 @@ function hexToRgbA(hex) {
 
 const htmlStrSanitize = (str) => (str ? str.replace(/<\/?[^>]+(>|$)/g, '').trim() : '');
 
+/**
+ * Query selector inside an iframe. Allows obtaining a single element that is
+ * inside an iframe in order to execute events on it.
+ * Note: the iframe must be same-origin for this to work.
+ *
+ * @param {string|Element} iframeEl The CSS selector string or the iframe Element itself.
+ * @param {string} el The query selector for the element inside the iframe.
+ * @returns {Element|null} The matched element inside the iframe, or null if not found.
+ * @memberof VanillaJS
+ */
+const sIframe = (iframeEl, el) => {
+  const iframe = typeof iframeEl === 'string' ? s(iframeEl) : iframeEl;
+  if (!iframe) return null;
+  const iframeDoc = iframe.contentDocument || iframe.contentWindow?.document;
+  return iframeDoc ? iframeDoc.querySelector(el) : null;
+};
+
+/**
+ * Query selector all inside an iframe. Allows obtaining all elements matching a
+ * selector that are inside an iframe in order to execute events on them.
+ * Note: the iframe must be same-origin for this to work.
+ *
+ * @param {string|Element} iframeEl The CSS selector string or the iframe Element itself.
+ * @param {string} el The query selector for the elements inside the iframe.
+ * @returns {NodeList|null} A NodeList of matched elements inside the iframe, or null if not found.
+ * @memberof VanillaJS
+ */
+const saIframe = (iframeEl, el) => {
+  const iframe = typeof iframeEl === 'string' ? s(iframeEl) : iframeEl;
+  if (!iframe) return null;
+  const iframeDoc = iframe.contentDocument || iframe.contentWindow?.document;
+  return iframeDoc ? iframeDoc.querySelectorAll(el) : null;
+};
+
 export {
   s,
   htmls,
   append,
   prepend,
   sa,
+  sIframe,
+  saIframe,
   copyData,
   pasteData,
   preHTML,

package/src/index.js

@@ -42,7 +42,7 @@ class Underpost {
    * @type {String}
    * @memberof Underpost
    */
-  static version = 'v3.0.0';
+  static version = 'v3.0.2';
 
   /**
    * Required Node.js major version

package/src/runtime/express/Express.js

@@ -20,6 +20,7 @@ import { createPeerServer } from '../../server/peer.js';
 import { createValkeyConnection } from '../../server/valkey.js';
 import { applySecurity, authMiddlewareFactory } from '../../server/auth.js';
 import { ssrMiddlewareFactory } from '../../server/ssr.js';
+import { buildSwaggerUiOptions } from '../../server/client-build-docs.js';
 
 import { shellExec } from '../../server/process.js';
 import { devProxyHostFactory, isDevProxyContext, isTlsDevProxy } from '../../server/conf.js';
@@ -98,7 +99,7 @@ class ExpressService {
 
     if (origins && isDevProxyContext())
       origins.push(devProxyHostFactory({ host, includeHttp: true, tls: isTlsDevProxy() }));
-    app.set('trust proxy', true);
+    app.set('trust proxy', 1);
 
     app.use((req, res, next) => {
       res.on('finish', () => {
@@ -167,8 +168,8 @@ class ExpressService {
       // Swagger UI setup
       if (fs.existsSync(swaggerJsonPath)) {
         const swaggerDoc = JSON.parse(fs.readFileSync(swaggerJsonPath, 'utf8'));
-        // Reusing swaggerPath defined outside, removing unnecessary redeclaration
-        app.use(swaggerPath, swaggerUi.serve, swaggerUi.setup(swaggerDoc));
+        const swaggerUiOptions = await buildSwaggerUiOptions();
+        app.use(swaggerPath, swaggerUi.serve, swaggerUi.setup(swaggerDoc, swaggerUiOptions));
       }
 
       // Security and CORS

package/src/server/auth.js

@@ -647,24 +647,24 @@ function applySecurity(app, opts = {}) {
     }),
   );
   logger.info('Cors origin', origin);
-
-  // Rate limiting + slow down
-  const limiter = rateLimit({
-    windowMs: rate.windowMs,
-    max: rate.max,
-    standardHeaders: true,
-    legacyHeaders: false,
-    message: { error: 'Too many requests, please try again later.' },
-  });
-  app.use(limiter);
-
-  const speedLimiter = slowDown({
-    windowMs: slowdown.windowMs,
-    delayAfter: slowdown.delayAfter,
-    delayMs: () => slowdown.delayMs,
-  });
-  app.use(speedLimiter);
-
+  if (!process.env.DISABLE_API_RATE_LIMIT) {
+    // Rate limiting + slow down
+    const limiter = rateLimit({
+      windowMs: rate.windowMs,
+      max: rate.max,
+      standardHeaders: true,
+      legacyHeaders: false,
+      message: { error: 'Too many requests, please try again later.' },
+    });
+    app.use(limiter);
+
+    const speedLimiter = slowDown({
+      windowMs: slowdown.windowMs,
+      delayAfter: slowdown.delayAfter,
+      delayMs: () => slowdown.delayMs,
+    });
+    app.use(speedLimiter);
+  }
   // Cookie parsing
   app.use(cookieParser(process.env.JWT_SECRET));
 }