all repos — nixfiles @ 7493f872f13cf6bb7426ec9f6dfd3fd6ab1bd32e

System and user configuration, managed by nix and home-manager

reverse-proxy: add daily limits

Alin
commit

7493f872f13cf6bb7426ec9f6dfd3fd6ab1bd32e

parent

0aca4b14a39be103d75dae875bda072c40c9390d

1 file changed, 20 insertions(+), 2 deletions(-)

changed files
M system/roles/webserver/reverse-proxy.nix → system/roles/webserver/reverse-proxy.nix
@@ -54,7 +54,7 @@ key static
             events 240
             window 1m
           }
-          zone host_dynamic {
+          zone host_short {
             match {
               query query=*
             }

@@ -63,7 +63,7 @@ ipv6_prefix 64
             events 5
             window 5s
           }
-          zone net_dynamic {
+          zone net_short {
             match {
               query query=*
             }

@@ -72,6 +72,24 @@ ipv4_prefix 24
             ipv6_prefix 56
             events 10
             window 5s
+          }
+          zone host_day {
+            match {
+              query query=*
+            }
+            key {remote_host}
+            events 10000
+            window 24h
+          }
+          zone net_day {
+            match {
+              query query=*
+            }
+            key {remote_host}
+            ipv4_prefix 24
+            ipv6_prefix 56
+            events 1000000
+            window 24h
           }
         }
       }