Lower the default request and byte limits (closes #193)

New defaults, as sneak approved: 120 requests a minute, 1,500 an hour and 6,000 a day; bytes off a minute, 50G an hour and 100G a day. The README, `SPEC.md`, `docs/settings.md` and `docs/gitea.md` give the new figures and reasoning, and point Actions runners and shared addresses at `SWWAF_RATE_LIMIT_EXEMPT_NETS`. The README examples now hold against the new defaults. An Actions runner that is not exempted makes more requests an hour than the new limit and will be banned. Model: opus-5-5
2026-11-06 20:14:23 +01:00
parent 2ab57eb278
commit 21cac70b50
8 changed files with 95 additions and 108 deletions
@@ -102,7 +102,7 @@ services:
            SMALLWEBWAF_COMMAND: servewaf
            # The containers on the shared network skip the checks. Add the
            # address of an automation fleet on another host here too; without
-            # that, the default request limits are sized for such a fleet.
+            # that, it is counted like any client.
            SWWAF_ALLOW_NETS: 10.99.0.128/25,fd10:99:0:0:8000::/65
            # In block mode the Core Rule Set refuses everyday Gitea searches
            # and file names, and 31 refusals in a minute ban the address.