diff nginx.conf @ 26:d3b72a8bfbe9 default tip

Add rate limiting, change moveLogs.sh to only operate on non-empty files
author Violet7
date Sat, 01 Nov 2025 22:12:56 -0700
parents bbafc54bbd26
children
line wrap: on
line diff
--- a/nginx.conf	Tue Oct 07 17:35:13 2025 -0600
+++ b/nginx.conf	Sat Nov 01 22:12:56 2025 -0700
@@ -12,8 +12,21 @@
 	resolver 8.8.8.8 1.1.1.1 valid=600s;
 	resolver_timeout 10s;
 
-	access_log off;
-	error_log off;
+  limit_req_zone $binary_remote_addr zone=perip:10m rate=10r/s;
+  limit_req zone=perip burst=20 nodelay;
+  limit_req_status 429;
+  limit_req_log_level warn;
+
+
+
+  log_format full '$remote_addr - $remote_user [$time_local] '
+              '"$request" $status $body_bytes_sent '
+              '"$http_referer" "$http_user_agent" '
+              'X-Forwarded-For: $http_x_forwarded_for';
+
+  # Enable access log globally (all requests)
+  access_log /Users/administrator/hghosting/logs/nginx_access.log full;
+  error_log /Users/administrator/hghosting/logs/nginx_error.log;
 
 	server {
 		listen 80;