Merge pull request #169 from NixOS/rate-limit

rate limit wiki
NixOS · Jan 4, 2025 · 590fa23 · 590fa23
2 parents 2003bc8 + c0373a2
commit 590fa23
Showing 1 changed file with 7 additions and 0 deletions.
diff --git a/modules/nixos-wiki/default.nix b/modules/nixos-wiki/default.nix
@@ -217,9 +217,16 @@ in
       80
     ];
     security.acme.acceptTerms = true;
+    services.nginx.appendHttpConfig = ''
+      limit_req_zone $binary_remote_addr zone=ip:20m rate=5r/s;
+      limit_req_status 429;
+    '';
     services.nginx.virtualHosts.${config.services.mediawiki.nginx.hostName} = {
       enableACME = lib.mkDefault true;
       forceSSL = lib.mkDefault true;
+      extraConfig = ''
+        limit_req zone=ip burst=20 nodelay;
+      '';
       locations."=/nixos.png".alias = ./nixos.png;
       locations."=/favicon.ico".alias = ./favicon.ico;
       locations."=/robots.txt".alias = ./robots.txt;