fix(gitea): block scraper IP and add rate limiting
74.7.243.196 was crawling valknar/home SVG icon tree at 1.8 req/s. - Denylist the IP in fail2ban dynamic config - Add rate-limit@file middleware to Gitea's Traefik router to throttle future scrapers on public repos Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
+1
-1
@@ -58,7 +58,7 @@ services:
|
||||
- "traefik.http.routers.gitea-web-secure.rule=Host(`${TRAEFIK_HOST}`)"
|
||||
- "traefik.http.routers.gitea-web-secure.tls.certresolver=resolver"
|
||||
- "traefik.http.routers.gitea-web-secure.entrypoints=web-secure"
|
||||
- "traefik.http.routers.gitea-web-secure.middlewares=security-headers@file"
|
||||
- "traefik.http.routers.gitea-web-secure.middlewares=security-headers@file,rate-limit@file"
|
||||
- "traefik.http.services.gitea-web-secure.loadbalancer.server.port=3000"
|
||||
- "traefik.docker.network=${NETWORK_NAME}"
|
||||
networks:
|
||||
|
||||
Reference in New Issue
Block a user