diff --git a/config/http/nginx.conf b/config/http/nginx.conf index 7e0d954..650bbe8 100644 --- a/config/http/nginx.conf +++ b/config/http/nginx.conf @@ -16,7 +16,7 @@ http { default_type application/octet-stream; - limit_req_zone $binary_remote_addr zone=req_limit_per_ip:10m rate=30r/s; + limit_req_zone $binary_remote_addr zone=req_limit_per_ip:10m rate=10r/s; limit_conn_zone $binary_remote_addr zone=conn_limit_per_ip:20m; limit_conn_status 429; diff --git a/config/nginx.auth.conf b/config/nginx.auth.conf index 76e290e..875278d 100644 --- a/config/nginx.auth.conf +++ b/config/nginx.auth.conf @@ -23,10 +23,6 @@ server { include /etc/nginx/mime.types; - limit_req zone=req_limit_per_ip burst=10 delay=20; - limit_conn conn_limit_per_ip 50; - - error_page 401 /login; @@ -51,6 +47,9 @@ server { } location / { + limit_req zone=req_limit_per_ip burst=30 delay=20; + limit_conn conn_limit_per_ip 30; + proxy_pass http://app; proxy_http_version 1.1; diff --git a/config/nginx.off.conf b/config/nginx.off.conf index 5bf88a8..3aaf7bc 100644 --- a/config/nginx.off.conf +++ b/config/nginx.off.conf @@ -9,8 +9,8 @@ server { listen 80; include /etc/nginx/mime.types; - limit_req zone=req_limit_per_ip burst=10 delay=20; - limit_conn conn_limit_per_ip 50; + limit_req zone=req_limit_per_ip burst=30 delay=20; + limit_conn conn_limit_per_ip 30; location / {