rate limit sample submission

GrapheneOS · Apr 19, 2021 · 9dd6887 · 9dd6887
1 parent 10f1d82
commit 9dd6887
Showing 1 changed file with 2 additions and 0 deletions.
diff --git a/nginx/nginx.conf b/nginx/nginx.conf
@@ -40,6 +40,7 @@ http {
     http2_max_concurrent_streams 32;
     limit_conn_zone $binary_remote_addr zone=addr:10m;
     limit_conn addr 256;
+    limit_req_zone $binary_remote_addr zone=sample:10m rate=6r/m;
 
     ssl_protocols TLSv1.2 TLSv1.3;
     ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256;
@@ -172,6 +173,7 @@ http {
             limit_except POST {
                 deny all;
             }
+            limit_req zone=sample burst=10 nodelay;
         }
 
         location = /challenge {