openvibers/openvibe.network Commits

nginx: /api/ burst 120 per address (was 30): an account page plus every open tab's navbar went past it and answered 429 (#327)

OP OpenVibers committed 19 days ago · 7fe1cbaa4a · 1 file, +5 −1

Changes

ddiff --git a/deploy/nginx/openvibe.network.conf b/deploy/nginx/openvibe.network.conf
iindex ee59b4cd..e0f6e91e 100644
---- a/deploy/nginx/openvibe.network.conf
++++ b/deploy/nginx/openvibe.network.conf
@@@ -131,7 +131,11 @@ server {
# ── API (moderate rate limit) ───────────────────────────
location /api/ {
-- limit_req zone=openvibenetwork_api burst=30 nodelay;
++ # 10 a second per address, with a burst of 120: one account page asks ~20 things at once, every open OpenVibe tab's
++ # navbar asks a few more (session, unread count, recent history, theme), and a release reloads all of a household's
++ # tabs together. At burst=30 the owner got 429s on notifications and history (2026-10-25). The app's own limit
++ # (600 a minute per address) and the per-actor write limits still apply.
++ limit_req zone=openvibenetwork_api burst=120 nodelay;
proxy_pass http://127.0.0.1:4000;
proxy_http_version 1.1;
proxy_set_header Host $host;