feat(haproxy): simplify Gitea rate limiting and fix rule ordering #31

Merged
Richie merged 1 commits from haproxy-rate-limit-tuning into main 2026-07-02 14:17:21 -04:00
Owner
  • Drop the session-cookie rate-limit bypass: Gitea hands the cookie to
    anonymous visitors too, so any cookie-accepting crawler could exempt
    itself after one request
  • Loosen the general Gitea limit from 10 to 50 req/10s since logged-in
    users are now rate-limited as well
  • Serve robots.txt above the rate-limit rules so throttled crawlers can
    always read the Crawl-delay, and capture Host/User-Agent before the
    deny so 429s are logged with them
  • Match the compare/diff cap on every repo case-insensitively instead
    of only /Richie/dotfiles
  • Remove the Jellyfin health check; it never ran (server had no check
    flag) and is not wanted
- Drop the session-cookie rate-limit bypass: Gitea hands the cookie to anonymous visitors too, so any cookie-accepting crawler could exempt itself after one request - Loosen the general Gitea limit from 10 to 50 req/10s since logged-in users are now rate-limited as well - Serve robots.txt above the rate-limit rules so throttled crawlers can always read the Crawl-delay, and capture Host/User-Agent before the deny so 429s are logged with them - Match the compare/diff cap on every repo case-insensitively instead of only /Richie/dotfiles - Remove the Jellyfin health check; it never ran (server had no check flag) and is not wanted
Richie added 1 commit 2026-07-01 16:54:57 -04:00
feat(haproxy): simplify Gitea rate limiting and fix rule ordering
treefmt / nix fmt (pull_request) Successful in 5s
pytest / pytest (pull_request) Successful in 25s
build_systems / build-brain (pull_request) Successful in 43s
build_systems / build-bob (pull_request) Successful in 45s
build_systems / build-rhapsody-in-green (pull_request) Successful in 58s
build_systems / build-jeeves (pull_request) Successful in 2m31s
build_systems / build-rhapsody-in-green (push) Successful in 13s
build_systems / build-jeeves (push) Successful in 2m15s
treefmt / nix fmt (push) Failing after 13m42s
build_systems / build-brain (push) Failing after 18m43s
build_systems / build-bob (push) Failing after 18m43s
pytest / pytest (push) Failing after 23m43s
fbf288649a
- Drop the session-cookie rate-limit bypass: Gitea hands the cookie to
  anonymous visitors too, so any cookie-accepting crawler could exempt
  itself after one request
- Loosen the general Gitea limit from 10 to 50 req/10s since logged-in
  users are now rate-limited as well
- Serve robots.txt above the rate-limit rules so throttled crawlers can
  always read the Crawl-delay, and capture Host/User-Agent before the
  deny so 429s are logged with them
- Match the compare/diff cap on every repo case-insensitively instead
  of only /Richie/dotfiles
- Remove the Jellyfin health check; it never ran (server had no check
  flag) and is not wanted
Richie merged commit fbf288649a into main 2026-07-02 14:17:21 -04:00
Richie deleted branch haproxy-rate-limit-tuning 2026-07-02 14:17:21 -04:00
Sign in to join this conversation.