docs: add security configuration documentation

2026-03-24 11:29:05 +08:00
parent 2ec4e65836
commit d6862b0754
2 changed files with 344 additions and 0 deletions
@@ -24,3 +24,16 @@ DATABASE_URL=file:./data/dev.db
 # File Upload
 UPLOAD_DIR=./uploads
 MAX_FILE_SIZE=10485760
+
+# Security Configuration
+# Rate Limiting (每分钟最大请求数)
+RATE_LIMIT_MAX_REQUESTS=10
+RATE_LIMIT_WINDOW_MS=60000
+
+# Captcha Configuration
+CAPTCHA_EXPIRY_MS=300000
+CAPTCHA_MAX_ATTEMPTS=3
+
+# Security Logging
+SECURITY_LOG_RETENTION_DAYS=30
+SECURITY_LOG_MAX_ENTRIES=1000