fix(backend): disable one-registration-per-IP by default

Shared NAT egress makes client IP unusable for uniqueness checks. Gate the behavior behind REGISTRATION_ENFORCE_IP (default false) for public/invite signup.
2026-10-07 23:13:22 +03:30
parent 92b1681241
commit 3cce2158e9
15 changed files with 103 additions and 53 deletions
@@ -23,6 +23,7 @@ x-backend-env: &backend-env
  STORAGE_SECRET_KEY: ${RUSTFS_SECRET_KEY:?RUSTFS_SECRET_KEY must be set}
  STORAGE_BUCKET: ${STORAGE_BUCKET:-pargar}
  SEED_CURRICULUM: ${SEED_CURRICULUM:-false}
+  REGISTRATION_ENFORCE_IP: ${REGISTRATION_ENFORCE_IP:-false}
  ADMIN_NAME: ${ADMIN_NAME:-Admin}
  ADMIN_USERNAME: ${ADMIN_USERNAME:-admin}
  ADMIN_EMAIL: ${ADMIN_EMAIL:-admin@example.com}