From 400a17a1ce8e204921be07a7c5b281ee528774cf Mon Sep 17 00:00:00 2001
From: Miroslav Prasil <miroslav@prasil.info>
Date: Sat, 30 Jun 2018 11:42:35 +0100
Subject: [PATCH] Add limits configuration to the readme

---
 README.md | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/README.md b/README.md
index d80b48c6..6eb24ce8 100644
--- a/README.md
+++ b/README.md
@@ -67,6 +67,15 @@ You could also set the `SIGNUPS_ALLOWED` environment variable. To do that when u
 -e SIGNUPS_ALLOWED=false
 ```
 
+## Changing the API request size limit
+
+By default the API calls are limited to 10MB. This should be sufficient for most cases, however if you want to support large imports, this might be limiting you. On the other hand you might want to limit the request size to something smaller than that to prevent API abuse and possible DOS attack, especially if running with limited resources.
+
+To set the limit, you can use the `ROCKET_LIMITS` variable. Example here shows 10MB limit for posted json in the body (this is the default):
+```
+-e ROCKET_LIMITS={json=10485760}
+```
+
 ## Enabling HTTPS
 To enable HTTPS, you need to configure the `ROCKET_TLS` option, the same way as `SIGNUPS_ALLOWED`.