From 2cad815cd8236075e135d2da66f98ee378a8f454 Mon Sep 17 00:00:00 2001
From: NotAShelf <raf@notashelf.dev>
Date: Tue, 10 Mar 2026 10:09:56 +0300
Subject: [PATCH] chore: update sample config for metrics ratelimiting

Signed-off-by: NotAShelf <raf@notashelf.dev>
Change-Id: I8cfa5900eac8c1f5c4364707356bb0ce6a6a6964
---
 config.example.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/config.example.yaml b/config.example.yaml
index c3ad980..87c06d8 100644
--- a/config.example.yaml
+++ b/config.example.yaml
@@ -63,6 +63,8 @@ limits:
   max_custom_events: 100
   # Maximum events per minute (rate limiting, 0 = unlimited)
   max_events_per_minute: 10000
+  # Maximum metrics endpoint requests per minute (rate limiting, 0 = unlimited, default: 30)
+  max_metrics_per_minute: 60
 
   # Device classification breakpoints (screen width in pixels)
   device_breakpoints:
@@ -85,6 +87,8 @@ security:
       - "*"  # Or specific domains: ["https://example.com", "https://www.example.com"]
 
   # Basic authentication for /metrics endpoint
+  # Password can also be set via environment variable:
+  # - `$ export WATCHDOG_SECURITY_METRICS_AUTH_PASSWORD=your-secret-password`
   metrics_auth:
     enabled: false
     username: "admin"