water/server/config/mini_protection.php

<?php

// All thresholds are shared across workers/hosts through the same Redis connection.
return [
    'enabled' => filter_var(env('MINI_PROTECTION_ENABLED', false), FILTER_VALIDATE_BOOLEAN),
    'connection' => 'mini_protection',
    'prefix' => 'water:mini:protection:v1:',
    'max_list_offset' => 10000,
    'limits' => [
        'ip_requests' => [300, 60],
        'ip_endpoint' => [120, 60],
        'account_requests' => [180, 60],
        'account_endpoint' => [60, 60],
        // Charged by requested page_size, shared across list endpoints and filters.
        'ip_list_rows' => [12000, 3600],
        'account_list_rows' => [6000, 3600],
    ],
];