From fb1d71a29b25af4e50044a4b4974b8ce3ab8c161 Mon Sep 17 00:00:00 2001 From: Viktor Barzin Date: Mon, 13 Oct 2025 20:13:20 +0000 Subject: [PATCH] kepe a bit more lenient ddos limits for immich due to image browsing [ci skip] --- modules/kubernetes/immich/main.tf | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/modules/kubernetes/immich/main.tf b/modules/kubernetes/immich/main.tf index a493c5ae..e8a9f0ea 100644 --- a/modules/kubernetes/immich/main.tf +++ b/modules/kubernetes/immich/main.tf @@ -215,6 +215,12 @@ resource "kubernetes_ingress_v1" "ingress" { # "nginx.ingress.kubernetes.io/client-body-buffer-size" : "512m" # "nginx.ingress.kubernetes.io/proxy-buffers-number" : "4" + # More lenient DDOS protection as to not confuse with image loading + "nginx.ingress.kubernetes.io/limit-connections" : 500 + "nginx.ingress.kubernetes.io/limit-rps" : 100 + "nginx.ingress.kubernetes.io/limit-rpm" : 60 + "nginx.ingress.kubernetes.io/limit-burst-multiplier" : 10 + # good for downloading big files - https://www.pdxdev.com/nginx-content-delivery/configuring-nginx-for-large-file-transfers/ "nginx.ingress.kubernetes.io/configuration-snippet" : <