all repos — nixfiles @ 99634d0b353b4e203fed754290d7b70f3f00797e

System and user configuration, managed by nix and home-manager

reverse-proxy: tweak rate limits

Alin
commit

99634d0b353b4e203fed754290d7b70f3f00797e

parent

484904b5f70726d6fef74aa41cea6cd1ba2ff09e

1 file changed, 6 insertions(+), 6 deletions(-)

changed files
M system/roles/webserver/reverse-proxy.nix → system/roles/webserver/reverse-proxy.nix
@@ -60,8 +60,8 @@ query query=*
             }
             key {remote_host}
             ipv6_prefix 64
-            events 5
-            window 5s
+            events 2
+            window 2s
           }
           zone net_short {
             match {

@@ -78,8 +78,8 @@ match {
               query query=*
             }
             key {remote_host}
-            events 2000
-            window 4h
+            events 500
+            window 1h
           }
           zone net_long {
             match {

@@ -88,8 +88,8 @@ }
             key {remote_host}
             ipv4_prefix 24
             ipv6_prefix 56
-            events 200000
-            window 4h
+            events 50000
+            window 1h
           }
         }
       }