Add rate limiting for changeset comments

[rails.git] / config / settings.yml

diff --git a/config/settings.yml b/config/settings.yml
index 929df7b8a15ee5bcc3e829a586927b401d122d8a..1a1d137cda81b36e10ff4a46a4424de65a952899 100644 (file)
--- a/config/settings.yml
+++ b/config/settings.yml
@@ -27,16 +27,24 @@ status: "online"
 max_request_area: 0.25
 # Number of GPS trace/trackpoints returned per-page
 tracepoints_per_page: 5000
 max_request_area: 0.25
 # Number of GPS trace/trackpoints returned per-page
 tracepoints_per_page: 5000

+# Default limit on the number of changesets returned by the changeset query api method
+default_changeset_query_limit: 100
+# Maximum limit on the number of changesets returned by the changeset query api method
+max_changeset_query_limit: 100

 # Maximum number of nodes that will be returned by the api in a map request
 max_number_of_nodes: 50000
 # Maximum number of nodes that can be in a way (checked on save)
 max_number_of_way_nodes: 2000
 # Maximum number of nodes that will be returned by the api in a map request
 max_number_of_nodes: 50000
 # Maximum number of nodes that can be in a way (checked on save)
 max_number_of_way_nodes: 2000

+# Maximum number of members that can be in a relation (checked on save)
+max_number_of_relation_members: 32000

 # The maximum area you're allowed to request notes from, in square degrees
 max_note_request_area: 25
 # The maximum area you're allowed to request notes from, in square degrees
 max_note_request_area: 25

+# Default limit on the number of notes returned by the note search api method
+default_note_query_limit: 100
+# Maximum limit on the number of notes returned by the note search api method
+max_note_query_limit: 10000

 # Zoom level to use for postcode results from the geocoder
 postcode_zoom: 15
 # Zoom level to use for postcode results from the geocoder
 postcode_zoom: 15

-# Zoom level to use for geonames results from the geocoder
-geonames_zoom: 12

 # Timeout for API calls in seconds
 api_timeout: 300
 # Timeout for web pages in seconds
 # Timeout for API calls in seconds
 api_timeout: 300
 # Timeout for web pages in seconds


@@ -47,10 +55,11 @@ user_block_periods: [0, 1, 3, 6, 12, 24, 48, 96, 168, 336, 731, 4383, 8766, 8766
 max_messages_per_hour: 60
 # Rate limit for friending
 max_friends_per_hour: 60
 max_messages_per_hour: 60
 # Rate limit for friending
 max_friends_per_hour: 60

+# Rate limit for changeset comments
+min_changeset_comments_per_hour: 6
+max_changeset_comments_per_hour: 60

 # Domain for handling message replies
 #messages_domain: "messages.openstreetmap.org"
 # Domain for handling message replies
 #messages_domain: "messages.openstreetmap.org"

-# Geonames authentication details
-#geonames_username: ""

 # MaxMind GeoIPv2 database
 #maxmind_database: ""
 # Users to show as being nearby
 # MaxMind GeoIPv2 database
 #maxmind_database: ""
 # Users to show as being nearby


@@ -63,9 +72,6 @@ spam_threshold: 50
 diary_feed_delay: 0
 # Default legale (jurisdiction location) for contributor terms
 default_legale: GB
 diary_feed_delay: 0
 # Default legale (jurisdiction location) for contributor terms
 default_legale: GB

-# Location of GPX traces and images
-gpx_trace_dir: "/home/osm/traces"
-gpx_image_dir: "/home/osm/images"

 # Location of data for attachments
 attachments_dir: ":rails_root/public/attachments"
 # Log file to use
 # Location of data for attachments
 attachments_dir: ":rails_root/public/attachments"
 # Log file to use


@@ -74,6 +80,8 @@ attachments_dir: ":rails_root/public/attachments"
 #logstash_path: ""
 # List of memcache servers to use for caching
 #memcache_servers: []
 #logstash_path: ""
 # List of memcache servers to use for caching
 #memcache_servers: []

+# Enable HTTP basic authentication support
+basic_auth_support: true

 # Enable legacy OAuth 1.0 support
 oauth_10_support: true
 # URL of Nominatim instance to use for geocoding
 # Enable legacy OAuth 1.0 support
 oauth_10_support: true
 # URL of Nominatim instance to use for geocoding


@@ -82,32 +90,27 @@ nominatim_url: "https://nominatim.openstreetmap.org/"
 default_editor: "id"
 # OAuth application for the web site
 #oauth_application: ""
 default_editor: "id"
 # OAuth application for the web site
 #oauth_application: ""

-# OAuth consumer key for iD
-#id_key: ""
+# OAuth application for iD
+#id_application: ""

 # Imagery to return in capabilities as blacklisted
 # Imagery to return in capabilities as blacklisted

-imagery_blacklist:
-  # Current Google imagery URLs have google or googleapis in the domain
-  # with a vt or kh endpoint, and x, y and z query parameters
-  - ".*\\.google(apis)?\\..*/(vt|kh)[\\?/].*([xyz]=.*){3}.*"
-  # Blacklist VWorld
-  - "http://xdworld\\.vworld\\.kr:8080/.*"
-  # Blacklist here
-  - ".*\\.here\\.com[/:].*"
+imagery_blacklist: []

 # URL of Overpass instance to use for feature queries
 overpass_url: "https://overpass-api.de/api/interpreter"
 # URL of Overpass instance to use for feature queries
 overpass_url: "https://overpass-api.de/api/interpreter"

+overpass_credentials: false

 # Routing endpoints
 graphhopper_url: "https://graphhopper.com/api/1/route"
 fossgis_osrm_url: "https://routing.openstreetmap.de/"
 # Routing endpoints
 graphhopper_url: "https://graphhopper.com/api/1/route"
 fossgis_osrm_url: "https://routing.openstreetmap.de/"

+fossgis_valhalla_url: "https://valhalla1.openstreetmap.de/route"

 # External authentication credentials
 #google_auth_id: ""
 #google_auth_secret: ""
 #google_openid_realm: ""
 #facebook_auth_id: ""
 #facebook_auth_secret: ""
 # External authentication credentials
 #google_auth_id: ""
 #google_auth_secret: ""
 #google_openid_realm: ""
 #facebook_auth_id: ""
 #facebook_auth_secret: ""

-#windowslive_auth_id: ""
-#windowslive_auth_secret: ""

 #github_auth_id: ""
 #github_auth_secret: ""
 #github_auth_id: ""
 #github_auth_secret: ""

+#microsoft_auth_id: ""
+#microsoft_auth_secret: ""

 #wikipedia_auth_id: ""
 #wikipedia_auth_secret: ""
 # Thunderforest authentication details
 #wikipedia_auth_id: ""
 #wikipedia_auth_secret: ""
 # Thunderforest authentication details


@@ -118,19 +121,25 @@ fossgis_osrm_url: "https://routing.openstreetmap.de/"
 csp_enforce: false
 # URL for reporting Content-Security-Policy violations
 #csp_report_url: ""
 csp_enforce: false
 # URL for reporting Content-Security-Policy violations
 #csp_report_url: ""

-# Storage service to use in production mode
-storage_service: "local"
-# Root URL for storage service
-# storage_url:
+# Storage services to use in production mode
+avatar_storage: "local"
+trace_file_storage: "local"
+trace_image_storage: "local"
+trace_icon_storage: "local"
+# Root URL for storage services
+# avatar_storage_url:
+# trace_image_storage_url:
+# trace_icon_storage_url:

 # URL for tile CDN
 #tile_cdn_url: ""
 # SMTP settings for outbound mail
 smtp_address: "localhost"
 smtp_port: 25
 smtp_domain: "localhost"
 # URL for tile CDN
 #tile_cdn_url: ""
 # SMTP settings for outbound mail
 smtp_address: "localhost"
 smtp_port: 25
 smtp_domain: "localhost"

-smtp_enable_starttls_auto: false
+smtp_enable_starttls_auto: true
+smtp_tls_verify_mode: "none"

 smtp_authentication: null
 smtp_user_name: null
 smtp_password: null
 smtp_authentication: null
 smtp_user_name: null
 smtp_password: null

-# Storage services
-avatar_storage: "local"
+# Matomo settings for analytics
+#matomo: