From 71cb38b33edf962c6b02a2bcf0f8ca86949699ae Mon Sep 17 00:00:00 2001
From: Michael Grote <michael.grote@posteo.de>
Date: Thu, 12 Sep 2024 10:10:40 +0200
Subject: [PATCH 1/2] ff

---
 docker-compose/traefik/file-provider.yml | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/docker-compose/traefik/file-provider.yml b/docker-compose/traefik/file-provider.yml
index d97fd9d4..f63e10b5 100644
--- a/docker-compose/traefik/file-provider.yml
+++ b/docker-compose/traefik/file-provider.yml
@@ -5,6 +5,8 @@ http:
     router_gitea:
       rule: "Host(`git.mgrote.net`)"
       service: "service_gitea"
+      middlewares:
+        - "ratelimit"
       entrypoints:
         - entry_https
       tls:
@@ -15,3 +17,12 @@ http:
       loadBalancer:
         servers:
           - url: "http://forgejo.mgrote.net:3000/"
+###### middlewares #####
+  middlewares:
+    ratelimit:
+      rateLimit:
+        average: 20
+        burst: 1
+        sourceCriterion:
+          ipStrategy:
+            depth: 2
-- 
2.43.0


From 66f74f319a6ded08d4325d8a691dbd97dac30c90 Mon Sep 17 00:00:00 2001
From: Michael Grote <michael.grote@posteo.de>
Date: Thu, 12 Sep 2024 10:26:58 +0200
Subject: [PATCH 2/2] dd

---
 docker-compose/traefik/file-provider.yml | 4 ++--
 docker-compose/traefik/traefik.yml       | 2 ++
 2 files changed, 4 insertions(+), 2 deletions(-)

diff --git a/docker-compose/traefik/file-provider.yml b/docker-compose/traefik/file-provider.yml
index f63e10b5..8f5b496e 100644
--- a/docker-compose/traefik/file-provider.yml
+++ b/docker-compose/traefik/file-provider.yml
@@ -21,8 +21,8 @@ http:
   middlewares:
     ratelimit:
       rateLimit:
-        average: 20
-        burst: 1
+        average: 10
+        burst: 5
         sourceCriterion:
           ipStrategy:
             depth: 2
diff --git a/docker-compose/traefik/traefik.yml b/docker-compose/traefik/traefik.yml
index 6cb83cc9..a7aa2321 100644
--- a/docker-compose/traefik/traefik.yml
+++ b/docker-compose/traefik/traefik.yml
@@ -33,6 +33,8 @@ certificatesResolvers:
 log:
   level: INFO
 
+accessLog: {}
+
 api:
   insecure: true
   dashboard: true # unter Port 8081 erreichbar
-- 
2.43.0