701b73bf53
Bot crawlers were hitting /<owner>/<repo>/archive/<sha>.zip on the dot_files repo (vim-plugin source trees) — each request synthesised a fresh ZIP from git history, taking 9.9s and returning 500 under sustained load. Cost: ~440m sustained forgejo CPU. Toggle: FORGEJO__repository__DISABLE_DOWNLOAD_SOURCE_ARCHIVES=true. /archive/* URLs now 404; git clone / OCI registry / API unaffected. Measured: forgejo pod 440-573m -> 60m steady-state (~85% drop). (Pod rollout took ~7min on the new RS due to kubelet's recursive chown of the 2700+ files in the data PVC — fsGroupChangePolicy is unset and defaults to Always; could be set to OnRootMismatch later.) |
||
|---|---|---|
| .. | ||
| files | ||
| .terraform.lock.hcl | ||
| backend.tf | ||
| cleanup.tf | ||
| main.tf | ||
| providers.tf | ||
| secrets | ||
| terragrunt.hcl | ||