title: Email: [Firebase] Client access to your Cloud Firestore database expiring in X day(s)
body: <p>I got an email that indicates I was developing in "test mode", but that it left my database completely open to the internet.  The default rules I initially accepted look like this:</p>
  
  <pre><code>rules_version = '2';
  service cloud.firestore {
    match /databases/{database}/documents {
  
      // This rule allows anyone on the internet to view, edit, and delete
      // all data in your Firestore database. It is useful for getting
      // started, but it is configured to expire after 30 days because it
      // leaves your app open to attackers. At that time, all client
      // requests to your Firestore database will be denied.
      //
      // Make sure to write security rules for your app before that time, or else
      // your app will lose access to your Firestore database
      match /{document=**} {
        allow read, write: if request.time &lt; timestamp.date(2019, 12, 14);
      }
    }
  }
  </code></pre>
  
  <p>What needs to be done to satisfy the request of this email?</p>