fix(gitea): block scraper IP and add rate limiting

74.7.243.196 was crawling valknar/home SVG icon tree at 1.8 req/s.
- Denylist the IP in fail2ban dynamic config
- Add rate-limit@file middleware to Gitea's Traefik router to throttle
  future scrapers on public repos

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
2026-06-17 10:27:56 +02:00
co-authored by Claude Sonnet 4.6
parent 3265d69a6c
commit 8d33836714
2 changed files with 3 additions and 1 deletions
+1 -1
View File
@@ -58,7 +58,7 @@ services:
- "traefik.http.routers.gitea-web-secure.rule=Host(`${TRAEFIK_HOST}`)"
- "traefik.http.routers.gitea-web-secure.tls.certresolver=resolver"
- "traefik.http.routers.gitea-web-secure.entrypoints=web-secure"
- "traefik.http.routers.gitea-web-secure.middlewares=security-headers@file"
- "traefik.http.routers.gitea-web-secure.middlewares=security-headers@file,rate-limit@file"
- "traefik.http.services.gitea-web-secure.loadbalancer.server.port=3000"
- "traefik.docker.network=${NETWORK_NAME}"
networks: