luke-else/server
1
0
Fork 0
Code Issues 5 Pull Requests Projects Releases Wiki Activity

fix: Tuned ratelimits for gitea

Browse Source
This commit is contained in:
luke-else
2026-09-08 21:27:59 +01:00
parent b943c55425
commit 298addcccd
1 changed files with 6 additions and 6 deletions
Download Patch File Download Diff File Expand all files Collapse all files
services/dev/gitea-docker-compose.yml
+5 -5
View File
@@ -45,15 +45,15 @@ services:
# request to git.luke-else.co.uk shares one budget) - this is what # request to git.luke-else.co.uk shares one budget) - this is what
# actually bounds a distributed/botnet-style flood, since per-IP limits # actually bounds a distributed/botnet-style flood, since per-IP limits
# alone don't catch many IPs each staying under the per-IP threshold. # alone don't catch many IPs each staying under the per-IP threshold.
- "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.average=50" - "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.average=100"
- "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.period=1s" - "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.period=5s"
- "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.burst=100" - "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.burst=200"
- "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.sourcecriterion.requestHost=true" - "traefik.http.middlewares.ratelimit-gitea-global.ratelimit.sourcecriterion.requestHost=true"
# Per-IP cap as a second layer, catching any single bad actor. # Per-IP cap as a second layer, catching any single bad actor.
- "traefik.http.middlewares.ratelimit-gitea-perip.ratelimit.average=10" - "traefik.http.middlewares.ratelimit-gitea-perip.ratelimit.average=25"
- "traefik.http.middlewares.ratelimit-gitea-perip.ratelimit.period=1s" - "traefik.http.middlewares.ratelimit-gitea-perip.ratelimit.period=1s"
- "traefik.http.middlewares.ratelimit-gitea-perip.ratelimit.burst=20" - "traefik.http.middlewares.ratelimit-gitea-perip.ratelimit.burst=50"
- "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https" - "traefik.http.middlewares.redirect-web-secure.redirectscheme.scheme=https"
- "traefik.http.routers.gitea-insecure.middlewares=ratelimit-gitea-global,ratelimit-gitea-perip,redirect-web-secure" - "traefik.http.routers.gitea-insecure.middlewares=ratelimit-gitea-global,ratelimit-gitea-perip,redirect-web-secure"