Roberto Alsina
493c5528ce
- Add global rate limiting zones (10r/s, 3r/s for POST) - Add API service limits (5r/s) for faas/gotify - Add unknown user agent detection with strict limits (2r/s) - Skip rate limiting for WebSocket connections - Add 429 error pages for rate limit exceeded - Enhance existing AI bot blocking with additional protection Co-Authored-By: z.ai model <noreply@z.ai>
Reverse Proxy setup
How I put my very own personal servers online, for free.
This sets up a reverse proxy using nginx on a VM in fly.io using tailscale to access the internal servers.
Details at the blog post
When adding a new hostname, remember to create a cert for it using
flyctl certs create hostname
Every 90 days the tailscale auth key will expire and you need to set a new one as a secret.
- Create the new one at https://login.tailscale.com/admin/settings/keys (MAKE IT REUSABLE)
- Configure it using flyctl secrets set TAILSCALE_AUTHKEY={{PASTEKEYHERE}}