diff --git a/package.json b/package.json
index 5871ae4..e958889 100644
--- a/package.json
+++ b/package.json
@@ -45,7 +45,7 @@
 				"description": "Long random password used by Synology or other clients to authenticate update requests. Use at least 32 random characters."
 			},
 			"DDNS_ALLOWED_HOSTNAMES": {
-				"description": "Comma-separated allowlist of DNS names this worker may update, for example nas.example.com,*.nas.example.com."
+				"description": "Comma-separated allowlist of DNS names this worker may update, for example `nas.example.com,*.nas.example.com`."
 			},
 			"DDNS_PROXIED": {
 				"description": "Set to false for most NAS setups. Use true only if you want the updated records proxied through Cloudflare."
diff --git a/wrangler.jsonc b/wrangler.jsonc
index 374105d..1e103fe 100644
--- a/wrangler.jsonc
+++ b/wrangler.jsonc
@@ -33,10 +33,11 @@
 		]
 	},
 	"vars": {
-		"DDNS_ALLOWED_HOSTNAMES": "nas.example.com,*.nas.example.com",
 		"DDNS_PROXIED": "false",
 		"DDNS_TTL": "1",
-		"DDNS_LOG_RETENTION_DAYS": "30"
+		"DDNS_LOG_RETENTION_DAYS": "30",
+		"DDNS_RATE_LIMIT_MAX_REQUESTS": "10",
+		"DDNS_RATE_LIMIT_WINDOW_SECONDS": "60"
 	},
 	"triggers": {
 		"crons": [