From 9bc5407cb5045467a9778039ae3e498dd4df970e Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Matej=20Ba=C4=8Do?= <matejbaco2000@gmail.com>
Date: Fri, 27 Mar 2026 16:15:14 +0100
Subject: [PATCH] Configurable abuse limit

---
 .env                        | 1 +
 app/controllers/general.php | 4 +++-
 2 files changed, 4 insertions(+), 1 deletion(-)

diff --git a/.env b/.env
index 9abfa756e1..910f3d725b 100644
--- a/.env
+++ b/.env
@@ -142,6 +142,7 @@ _APP_MESSAGE_PUSH_TEST_DSN=
 _APP_WEBHOOK_MAX_FAILED_ATTEMPTS=10
 _APP_PROJECT_REGIONS=default
 _APP_FUNCTIONS_CREATION_ABUSE_LIMIT=5000
+_APP_EMAILS_ABUSE_LIMIT=20
 _APP_STATS_USAGE_DUAL_WRITING_DBS=database_db_main
 _APP_TRUSTED_HEADERS=x-forwarded-for
 _APP_POOL_ADAPTER=stack
diff --git a/app/controllers/general.php b/app/controllers/general.php
index b35f317990..558b736fa2 100644
--- a/app/controllers/general.php
+++ b/app/controllers/general.php
@@ -1140,7 +1140,9 @@ Http::init()
         */
         $abuseKey = 'initHook:outgoingEmail,projectId:{projectId}';
 
-        $timeLimit = $timelimit($abuseKey, limit: 1000, time: 3600); // 1000 emails per hour , per project
+        $limitPerHour = \intval(System::getEnv('_APP_EMAILS_ABUSE_LIMIT', '1000'));
+
+        $timeLimit = $timelimit($abuseKey, limit: $limitPerHour, time: 3600); // 1000 emails per hour , per project
         $timeLimit
             ->setParam('{projectId}', $project->getId());