feat(access): scope viewer invitations to rooms (#56)

deploy/nginx/share.bonfire.icu.conf.example

@@ -3,6 +3,8 @@ map $http_upgrade $screener_connection_upgrade {
     '' close;
 }
 
+limit_req_zone $binary_remote_addr zone=screener_host_admission:10m rate=5r/m;
+
 server {
     listen 80;
     listen [::]:80;
@@ -82,6 +84,17 @@ server {
         return 404;
     }
 
+    location = /api/host-admission {
+        limit_req zone=screener_host_admission burst=5 nodelay;
+        limit_req_status 429;
+        proxy_pass http://127.0.0.1:8787;
+        proxy_http_version 1.1;
+        proxy_set_header Host $host;
+        proxy_set_header X-Forwarded-Host $host;
+        proxy_set_header X-Forwarded-Proto https;
+        proxy_buffering off;
+    }
+
     location / {
         proxy_pass http://127.0.0.1:8787;
         proxy_http_version 1.1;