From 13ef9975b5d6b159207273e971cf614477c793ca Mon Sep 17 00:00:00 2001
From: Tom Hughes <tom@compton.nu>
Date: Thu, 13 Jun 2024 22:25:12 +0100
Subject: [PATCH] Tighten mod_evasive restrictions for the main site

---
 roles/web-frontend.rb | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/roles/web-frontend.rb b/roles/web-frontend.rb
index b5597adb6..8e8fa817d 100644
--- a/roles/web-frontend.rb
+++ b/roles/web-frontend.rb
@@ -4,6 +4,11 @@ description "Role applied to all web/api frontend servers"
 default_attributes(
   :apache => {
     :mpm => "event",
+    :evasive => {
+      :page_count => 30,
+      :site_count => 100,
+      :blocking_period => 30
+    },
     :event => {
       :server_limit => 20,
       :max_request_workers => 1000,
-- 
2.39.5