const rateLimit = require('express-rate-limit') const isProduction = process.env.NODE_ENV === 'production' module.exports = rateLimit({ // 1 minute (or practically unlimited outside of production) windowMs: isProduction ? (60 * 1000) : 1, // limit each IP to 20 requests per windowMs max: 250, // Don't rate limit requests for 200s and redirects // Or anything with a status code less than 400 skipSuccessfulRequests: true })