1 files changed, 12 insertions, 0 deletions
diff --git a/src/config/mod.rs b/src/config/mod.rs
index f6d3e15..572960b 100644
--- a/src/config/mod.rs
+++ b/src/config/mod.rs
@@ -180,6 +180,13 @@ pub(crate) const OPTIONS: &[OptionSpec] = &[
         "With bootstrap-users: their SSH keys, as authorized_keys lines (ssh-ed25519 <base64> [comment], named by the comment), recorded in their entries: to log in by key and sign values (docs/access.md), so a swarm can be strict from its start.",
     ),
     option(
+        "refused-writes-per-minute",
+        Kind::Integer,
+        "COUNT",
+        Some("10"),
+        "Writes a user may have refused within a minute because every node would refuse them (docs/access.md); past it, its writes are answered 429 untried for a while. Each refusal costs a copy of the document.",
+    ),
+    option(
         "genesis-root",
         Kind::Text,
         "HASH",
@@ -633,6 +640,8 @@ pub(crate) struct Settings {
     pub(crate) challenge_lifetime: Duration,
     #[serde(default = "default_key_logins_per_user")]
     pub(crate) key_logins_per_user: usize,
+    #[serde(default = "default_refused_writes_per_minute")]
+    pub(crate) refused_writes_per_minute: usize,
     #[serde(default)]
     pub(crate) debug_api: bool,
     #[serde(default = "default_log_format")]
@@ -799,6 +808,9 @@ fn default_session_lifetime() -> Duration {
 fn default_challenge_lifetime() -> Duration {
     Duration::from_secs(5 * 60)
 }
+fn default_refused_writes_per_minute() -> usize {
+    10
+}
 fn default_key_logins_per_user() -> usize {
     100
 }