From 989a274949c3be1431d9b3cb68821ff5a9122b4d Mon Sep 17 00:00:00 2001 From: einhornimmond Date: Fri, 9 Aug 2024 10:53:56 +0200 Subject: [PATCH] comment out nginx request limiter --- .../gradido-federation.conf.template | 4 ++-- .../sites-available/gradido.conf.ssl.template | 24 +++++++++---------- .../sites-available/gradido.conf.template | 24 +++++++++---------- .../update-page.conf.ssl.template | 8 +++---- .../sites-available/update-page.conf.template | 8 +++---- 5 files changed, 34 insertions(+), 34 deletions(-) diff --git a/deployment/bare_metal/nginx/sites-available/gradido-federation.conf.template b/deployment/bare_metal/nginx/sites-available/gradido-federation.conf.template index 5123deb5e..cf5f53b25 100644 --- a/deployment/bare_metal/nginx/sites-available/gradido-federation.conf.template +++ b/deployment/bare_metal/nginx/sites-available/gradido-federation.conf.template @@ -1,7 +1,7 @@ location /api/$FEDERATION_APIVERSION { - limit_req zone=api burst=60 nodelay; - limit_conn addr 30; + #limit_req zone=api burst=60 nodelay; + #limit_conn addr 30; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; diff --git a/deployment/bare_metal/nginx/sites-available/gradido.conf.ssl.template b/deployment/bare_metal/nginx/sites-available/gradido.conf.ssl.template index 9910c3366..294e9f8a0 100644 --- a/deployment/bare_metal/nginx/sites-available/gradido.conf.ssl.template +++ b/deployment/bare_metal/nginx/sites-available/gradido.conf.ssl.template @@ -25,8 +25,8 @@ server { include /etc/nginx/common/protect_add_header.conf; # protect from slow loris - client_body_timeout 10s; - client_header_timeout 10s; + #client_body_timeout 10s; + #client_header_timeout 10s; # protect from range attack (in http header) if ($http_range ~ "d{9,}") { @@ -54,8 +54,8 @@ server { # Frontend (default) location / { - limit_req zone=frontend burst=40 nodelay; - limit_conn addr 40; + #limit_req zone=frontend burst=40 nodelay; + #limit_conn addr 40; root $PROJECT_ROOT/frontend/build/; index index.html; try_files $uri $uri/ /index.html = 404; @@ -66,8 +66,8 @@ server { # Backend location /graphql { - limit_req zone=backend burst=10 nodelay; - limit_conn addr 10; + #limit_req zone=backend burst=10 nodelay; + #limit_conn addr 10; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; @@ -84,8 +84,8 @@ server { # Backend webhooks location /hook { - limit_req zone=backend burst=10; - limit_conn addr 10; + #limit_req zone=backend burst=10; + #limit_conn addr 10; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; @@ -102,8 +102,8 @@ server { # Webhook reverse proxy location /hooks/ { - limit_req zone=backend burst=10; - limit_conn addr 10; + #limit_req zone=backend burst=10; + #limit_conn addr 10; proxy_pass http://127.0.0.1:9000/hooks/; access_log $GRADIDO_LOG_PATH/nginx-access.hooks.log gradido_log; @@ -112,8 +112,8 @@ server { # Admin Frontend location /admin { - limit_req zone=frontend burst=30 nodelay; - limit_conn addr 40; + #limit_req zone=frontend burst=30 nodelay; + #limit_conn addr 40; rewrite ^/admin/(.*)$ /$1 break; root $PROJECT_ROOT/admin/build/; index index.html; diff --git a/deployment/bare_metal/nginx/sites-available/gradido.conf.template b/deployment/bare_metal/nginx/sites-available/gradido.conf.template index e64e7e1ce..7bd28b228 100644 --- a/deployment/bare_metal/nginx/sites-available/gradido.conf.template +++ b/deployment/bare_metal/nginx/sites-available/gradido.conf.template @@ -10,8 +10,8 @@ server { include /etc/nginx/common/protect_add_header.conf; # protect from slow loris - client_body_timeout 10s; - client_header_timeout 10s; + #client_body_timeout 10s; + #client_header_timeout 10s; # protect from range attack (in http header) if ($http_range ~ "d{9,}") { @@ -38,8 +38,8 @@ server { # Frontend (default) location / { - limit_req zone=frontend burst=40 nodelay; - limit_conn addr 40; + #limit_req zone=frontend burst=40 nodelay; + #limit_conn addr 40; root $PROJECT_ROOT/frontend/build/; index index.html; try_files $uri $uri/ /index.html = 404; @@ -50,8 +50,8 @@ server { # Backend location /graphql { - limit_req zone=backend burst=10 nodelay; - limit_conn addr 10; + #limit_req zone=backend burst=10 nodelay; + #limit_conn addr 10; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; @@ -68,8 +68,8 @@ server { # Backend webhooks location /hook { - limit_req zone=backend burst=10; - limit_conn addr 10; + #limit_req zone=backend burst=10; + #limit_conn addr 10; proxy_http_version 1.1; proxy_set_header Upgrade $http_upgrade; proxy_set_header Connection 'upgrade'; @@ -86,8 +86,8 @@ server { # Webhook reverse proxy location /hooks/ { - limit_req zone=backend burst=10; - limit_conn addr 10; + #limit_req zone=backend burst=10; + #limit_conn addr 10; proxy_pass http://127.0.0.1:9000/hooks/; access_log $GRADIDO_LOG_PATH/nginx-access.hooks.log gradido_log; @@ -96,8 +96,8 @@ server { # Admin Frontend location /admin { - limit_req zone=frontend burst=30 nodelay; - limit_conn addr 40; + #limit_req zone=frontend burst=30 nodelay; + #limit_conn addr 40; rewrite ^/admin/(.*)$ /$1 break; root $PROJECT_ROOT/admin/build/; index index.html; diff --git a/deployment/bare_metal/nginx/sites-available/update-page.conf.ssl.template b/deployment/bare_metal/nginx/sites-available/update-page.conf.ssl.template index fd41c333d..7af8a7cae 100644 --- a/deployment/bare_metal/nginx/sites-available/update-page.conf.ssl.template +++ b/deployment/bare_metal/nginx/sites-available/update-page.conf.ssl.template @@ -24,8 +24,8 @@ server { include /etc/nginx/common/protect_add_header.conf; # protect from slow loris - client_body_timeout 10s; - client_header_timeout 10s; + #client_body_timeout 10s; + #client_header_timeout 10s; # protect from range attack (in http header) if ($http_range ~ "d{9,}") { @@ -38,8 +38,8 @@ server { index updating.html; location / { - limit_req zone=frontend; - limit_conn addr 10; + #limit_req zone=frontend; + #limit_conn addr 10; try_files /updating.html =404; } diff --git a/deployment/bare_metal/nginx/sites-available/update-page.conf.template b/deployment/bare_metal/nginx/sites-available/update-page.conf.template index be91abc88..fd4b2da41 100644 --- a/deployment/bare_metal/nginx/sites-available/update-page.conf.template +++ b/deployment/bare_metal/nginx/sites-available/update-page.conf.template @@ -9,8 +9,8 @@ server { include /etc/nginx/common/protect_add_header.conf; # protect from slow loris - client_body_timeout 10s; - client_header_timeout 10s; + #client_body_timeout 10s; + #client_header_timeout 10s; # protect from range attack (in http header) if ($http_range ~ "d{9,}") { @@ -23,8 +23,8 @@ server { index updating.html; location / { - limit_req zone=frontend; - limit_conn addr 10; + #limit_req zone=frontend; + #limit_conn addr 10; try_files /updating.html =404; }