The_Great_Archive/cryptpad
1
0
Fork 0
mirror of https://github.com/cryptpad/cryptpad.git synced 2026-09-14 11:05:41 +05:00
Code Issues Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'origin/nginx-ratelimit' into 2026.2.1-rc

Browse Source
This commit is contained in:
yflory 2026-03-18 15:39:31 +01:00
commit 6dacfef67a
1 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
docs/example-advanced.nginx.conf
View File

@ -23,6 +23,9 @@ server {
return 301 https://$host$request_uri;
}
# Websocket connections rate limiting
limit_req_zone $binary_remote_addr zone=wslimit:20m rate=30r/m;
server {
listen 443 ssl;
listen [::]:443 ssl;
@ -190,6 +193,10 @@ server {
# We prefer to serve static content from nginx directly and to leave the API server to handle
# the dynamic content that only it can manage. This is primarily an optimization
location ^~ /cryptpad_websocket {
# Websocket connections rate limiting
limit_req zone=wslimit burst=5 nodelay;
limit_req_status 429;
# XXX
# static assets like blobs and blocks are served by clustered workers in the API server
# Websocket traffic still needs to be handled by the main process, which means it needs