class Rack::Attack
  throttle("api/ip", limit: 300, period: 5.minutes) do |req|
    req.ip if req.path.start_with?("/api/")
  end

  throttle("auth/ip", limit: 20, period: 5.minutes) do |req|
    req.ip if req.path.include?("/auth/login")
  end
end

Rails.application.config.middleware.use Rack::Attack if defined?(Rack::Attack)