}
# Rates table based on current cookie value
-map $cookie_qos_token $limit_rate_qos {
+map $cookie__osm_totp_token $limit_rate_qos {
include /etc/nginx/conf.d/tile_qos_rates.map;
}
# Set-Cookie table based on current cookie value
-map $cookie_qos_token $cookie_qos_token_set {
+map $cookie__osm_totp_token $cookie_qos_token_set {
include /etc/nginx/conf.d/tile_qos_cookies.map;
}
'~^R$' 1; # Library Default
'~^Java\/' 1; # Library Default
'~^tiles$' 1; # Library Default
- '~^Dalvik\/' 1; # Library Default
'~^runtastic' 1; # App
'Mozilla/4.0' 1; # Fake
'Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)' 1; # Fake
ssl_certificate /etc/ssl/certs/tile.openstreetmap.org.pem;
ssl_certificate_key /etc/ssl/private/tile.openstreetmap.org.key;
+ # Requests sent within early data are subject to replay attacks.
+ # See: http://nginx.org/en/docs/http/ngx_http_ssl_module.html#ssl_early_data
+ ssl_early_data on;
+
# Immediately 404 layers we do not support
<% for i in 20..99 do %>
location /<%= i %>/ {