feat: forgor rate limiting (whoopsies)

docker-compose.yml

@@ -48,9 +48,9 @@ services:
       - '443:443'
     depends_on:
       app:
-        condition: service_healthy
+        condition: service_started
     volumes:
-      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf
       - ./.ssl/certs:/etc/nginx/certs:ro
     healthcheck:
       test: [ "CMD", "nc", "-vz", "::1", "80" ]

nginx.conf

@@ -1,3 +1,5 @@
+limit_req_zone $binary_remote_addr zone=per_ip:10m rate=10r/s;
+
 server {
   listen 80;
   listen [::]:80;
@@ -8,9 +10,13 @@ server {
   ssl_certificate_key /etc/nginx/certs/localhost/localhost.key.pem;
   ssl_trusted_certificate /etc/nginx/certs/localhost/localhost.fullchain.pem;
 
+  client_max_body_size 10m;
+
   location / {
       proxy_pass http://app:3000;
 
+      limit_req zone=per_ip nodelay;
+
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;