viktor/infra
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

android-emulator: dedicated rate-limit — noVNC's module storm tripped the shared 10/50 limiter

Browse source 
Viktor's 'VNC stuck loading forever' (remote network): noVNC 1.3 is
unbundled and fetches ~60 ES modules in parallel on page open; the shared
Traefik rate-limit (average 10, burst 50) 429s the tail and noVNC's
loader waits on the missing modules indefinitely (reproduced: 38x429 in
a 90-request burst through the ingress). Adds a dedicated 50/300
android-emulator-rate-limit middleware (actualbudget/immich pattern) and
opts both emulator ingresses out of the shared limiter.
This commit is contained in:
Viktor Barzin 2026-06-12 00:25:44 +00:00
parent d818f7ed3b
commit 152dad0a40
2 changed files with 34 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

10
stacks/android-emulator/main.tf
View file

@ -231,6 +231,11 @@ module "ingress-internal" {
extra_annotations = {
"gethomepage.dev/enabled" = "false"
}
# noVNC loads ~60 unbundled ES modules in parallel; the default 10/50
# limiter 429s the tail and the loader hangs forever. Dedicated limiter,
# same pattern as actualbudget/immich.
skip_default_rate_limit = true
extra_middlewares = ["traefik-android-emulator-rate-limit@kubernetescrd"]
}
# Remote (off-LAN) screen access — Authentik-gated at the edge; WebSockets
@ -246,4 +251,9 @@ module "ingress-public" {
host = "android-emulator"
service_name = kubernetes_service.novnc.metadata[0].name
tls_secret_name = var.tls_secret_name
# noVNC loads ~60 unbundled ES modules in parallel; the default 10/50
# limiter 429s the tail and the loader hangs forever. Dedicated limiter,
# same pattern as actualbudget/immich.
skip_default_rate_limit = true
extra_middlewares = ["traefik-android-emulator-rate-limit@kubernetescrd"]
}