Commit e029f58225c5

@@ -1108,6 +1108,27 @@ in
         ${mediaSecurityHeaders}
       '';
 
+      "rss.sbr.pm".extraConfig = ''
+        ${blockAIBotsSnippet}
+        ${robotsTxtSnippet}
+
+        # Rate limiting for RSS reader
+        rate_limit {
+          zone rss_general {
+            key {remote_host}
+            events 100
+            window 1m
+          }
+        }
+
+        reverse_proxy 10.100.0.49:8085 {
+          header_up Host {host}
+          header_up X-Real-IP {remote_host}
+        }
+
+        ${mediaSecurityHeaders}
+      '';
+
       # HTTP echo — echoes request headers (debug tool)
       # Logs all headers (including Authorization) to a dedicated log file
       "echo.sbr.pm".extraConfig = ''

@@ -23,6 +23,7 @@ baseZone
     music.A = [ "46.224.100.116" ]; # navidrome
     photos.A = [ "46.224.100.116" ]; # immich
     podcasts.A = [ "46.224.100.116" ]; # audiobookshelf
+    rss.A = [ "46.224.100.116" ]; # miniflux
     llm.A = [ "10.100.0.50" ]; # rhea VPN IP
   };
 }