fix: charts?

Author: blackheaven

charts/wire-server/values.yaml

@@ -1040,6 +1040,33 @@ background-worker:
       conversationCodes: cassandra
       teamFeatures: cassandra
 
+    settings:
+      maxTeamSize: 10000
+      maxFanoutSize: 500
+      exposeInvitationURLsTeamAllowlist: []
+      maxConvSize: 500
+      intraListing: true
+      conversationCodeURI: null
+      multiIngress: null
+      federationProtocols: null
+      guestLinkTTLSeconds: 31536000
+      passwordHashingOptions:
+        algorithm: scrypt # or argon2id
+      passwordHashingRateLimit:
+        ipAddrLimit:
+          burst: 5
+          inverseRate: 300000000 # 5 mins, makes it 12 reqs/hour
+        userLimit:
+          burst: 5
+          inverseRate: 60000000 # 1 min, makes it 60 req/hour
+        internalLimit:
+          burst: 10
+          inverseRate: 0 # No rate limiting for internal use
+        ipv4CidrBlock: 32 # Only block individual IP addresses
+        ipv6CidrBlock: 64 # Block /64 range at a time.
+        ipAddressExceptions: []
+        maxRateLimitedKeys: 100000 # Estimated memory usage: 4 MB
+
   secrets:
     {}
     # pgPassword: <postgres-password>

hack/helm_vars/wire-federation-v0/values.yaml.gotmpl

@@ -324,6 +324,7 @@ background-worker:
         ipv6CidrBlock: 64 # Block /64 range at a time.
         ipAddressExceptions:
         - 127.0.0.1/8
+        maxRateLimitedKeys: 100000
       checkGroupInfo: false
   secrets:
     rabbitmq:

hack/helm_vars/wire-server/values.yaml.gotmpl

@@ -321,8 +321,20 @@ galley:
         parallelism: 4
         memory: 32 # This needs to be at least 8 * parallelism.
       passwordHashingRateLimit:
+        ipAddrLimit:
+          burst: 5
+          inverseRate: 300000000 # 5 mins, makes it 12 reqs/hour
+        userLimit:
+          burst: 5
+          inverseRate: 60000000 # 1 min, makes it 60 req/hour
+        internalLimit:
+          burst: 10
+          inverseRate: 0 # No rate limiting for internal use
+        ipv4CidrBlock: 32 # Only block individual IP addresses
+        ipv6CidrBlock: 64 # Block /64 range at a time.
         ipAddressExceptions:
         - 127.0.0.1/8
+        maxRateLimitedKeys: 100000
 
       featureFlags:
         sso: disabled-by-default  # this needs to be the default; tests can enable it when needed.
@@ -709,6 +721,7 @@ background-worker:
         ipv6CidrBlock: 64 # Block /64 range at a time.
         ipAddressExceptions:
         - 127.0.0.1/8
+        maxRateLimitedKeys: 100000
       checkGroupInfo: false
   secrets:
     pgPassword: "posty-the-gres"