Further limit the index endpoint (#1950)

app/api/views/alias.py

@@ -73,7 +73,7 @@ def get_aliases():
 
 @api_bp.route("/v2/aliases", methods=["GET", "POST"])
 @limiter.limit(
-    "15/minute",
+    "5/minute",
 )
 @require_api_auth
 def get_aliases_v2():

app/dashboard/views/index.py

@@ -58,7 +58,7 @@ def get_stats(user: User) -> Stats:
     exempt_when=lambda: request.form.get("form-name") != "create-random-email",
 )
 @limiter.limit(
-    "10/minute",
+    "5/minute",
     methods=["GET"],
 )
 @login_required