cesnimda
9fa16b650d
- POST /api/contact: validate -> honeypot -> per-IP rate limit -> SMTP send - /healthz endpoint; CORS locked to site origin; forwarded-headers for real client IP - no persistence, no message bodies logged (IP hashed to a short non-reversible marker) - source-generated JSON; config via env (SMTP + relay settings) - alpine multi-stage Dockerfile, non-root, healthcheck - verified: healthz 200, invalid 400, honeypot silent 200, missing-SMTP 502 Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>
17 lines
271 B
JSON
17 lines
271 B
JSON
{
|
|
"Logging": {
|
|
"LogLevel": {
|
|
"Default": "Information",
|
|
"Microsoft.AspNetCore": "Warning"
|
|
}
|
|
},
|
|
"Relay": {
|
|
"AllowedOrigin": "https://cesnimda.co.uk",
|
|
"RateLimitPerWindow": 5,
|
|
"WindowSeconds": 600
|
|
},
|
|
"Smtp": {
|
|
"Port": 587
|
|
}
|
|
}
|