fix(gitea): block scraper IP and add rate limiting

74.7.243.196 was crawling valknar/home SVG icon tree at 1.8 req/s. - Denylist the IP in fail2ban dynamic config - Add rate-limit@file middleware to Gitea's Traefik router to throttle future scrapers on public repos Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-06-17 10:27:56 +02:00
parent 3265d69a6c
commit 8d33836714
2 changed files with 3 additions and 1 deletions
@@ -5,6 +5,8 @@ http:
        fail2ban:
          allowlist:
            ip: "127.0.0.1/8,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16,::1"
+          denylist:
+            ip: "74.7.243.196"
          rules:
            bantime: "3h"
            findtime: "10m"