From 5c4f331547d56bee3919b8690b82a007b42450bd Mon Sep 17 00:00:00 2001
From: Roman Siverov <roman@siverov.com>
Date: Thu, 4 Jun 2026 14:06:56 +0300
Subject: [PATCH] feat: forgor rate limiting (whoopsies)

---
 docker-compose.yml | 4 ++--
 nginx.conf         | 6 ++++++
 2 files changed, 8 insertions(+), 2 deletions(-)

diff --git a/docker-compose.yml b/docker-compose.yml
index 4398776..2c30a86 100644
--- a/docker-compose.yml
+++ b/docker-compose.yml
@@ -48,9 +48,9 @@ services:
       - '443:443'
     depends_on:
       app:
-        condition: service_healthy
+        condition: service_started
     volumes:
-      - ./nginx.conf:/etc/nginx/conf.d/default.conf:ro
+      - ./nginx.conf:/etc/nginx/conf.d/default.conf
       - ./.ssl/certs:/etc/nginx/certs:ro
     healthcheck:
       test: [ "CMD", "nc", "-vz", "::1", "80" ]
diff --git a/nginx.conf b/nginx.conf
index e3d1c61..98d26b5 100644
--- a/nginx.conf
+++ b/nginx.conf
@@ -1,3 +1,5 @@
+limit_req_zone $binary_remote_addr zone=per_ip:10m rate=10r/s;
+
 server {
   listen 80;
   listen [::]:80;
@@ -8,9 +10,13 @@ server {
   ssl_certificate_key /etc/nginx/certs/localhost/localhost.key.pem;
   ssl_trusted_certificate /etc/nginx/certs/localhost/localhost.fullchain.pem;
 
+  client_max_body_size 10m;
+
   location / {
       proxy_pass http://app:3000;
 
+      limit_req zone=per_ip nodelay;
+
       proxy_set_header Host $host;
       proxy_set_header X-Real-IP $remote_addr;
       proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;