Mirrors/RealOrangeOne-infrastructure
1
0
Fork 1
mirror of https://github.com/RealOrangeOne/infrastructure.git synced 2026-07-17 16:35:58 +00:00
Code Issues Projects Releases Wiki Activity

Limit request body size

Browse source
This commit is contained in:
Jake Howard 2026-05-11 12:58:57 +01:00
parent bdb1f0f9a4
commit c540751ef6
No known key found for this signature in database
GPG key ID: 57AFB45680EDD477
3 changed files with 8 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

3
ansible/roles/pve_docker/files/nextcloud/docker-compose.yml
View file

@ -23,7 +23,8 @@ services:
- traefik.http.services.nextcloud-nextcloud.loadbalancer.server.port=443
- traefik.http.services.nextcloud-nextcloud.loadbalancer.server.scheme=https
- traefik.http.middlewares.nextcloud-hsts.headers.stsseconds=15552000
- traefik.http.routers.nextcloud.middlewares=nextcloud-hsts@docker
- traefik.http.middlewares.nextcloud-limit.buffering.maxRequestBodyBytes=0
- traefik.http.routers.nextcloud.middlewares=nextcloud-hsts@docker,nextcloud-limit@docker
networks:
- default
- traefik

5
ansible/roles/traefik/files/file-provider-main.yml
View file

@ -17,6 +17,11 @@ http:
customResponseHeaders:
Permissions-Policy: interest-cohort=()
request-limit:
buffering:
maxRequestBodyBytes: 2000000
memResponseBodyBytes: 10000000
tailscale-only:
ipAllowList:
sourceRange:

1
ansible/roles/traefik/files/traefik.yml
View file

@ -18,6 +18,7 @@ entryPoints:
- floc-block@file
- compress@file
- secure-headers@file
- request-limit@file
tls:
certResolver: "{{ 'acme-tls' if traefik_tls_challenge else 'acme-http' }}"
{% if traefik_tls_challenge %}