nominatim: be quicker to ban IPs that have been blocked

diff --git a/cookbooks/nominatim/templates/default/nginx.erb b/cookbooks/nominatim/templates/default/nginx.erb
index d39cafeb97d1e4c83a9ff7b09a75ae1d38033f72..ca9c5fd203c03d8546367e67bfc567dc988bb142 100644 (file)
--- a/cookbooks/nominatim/templates/default/nginx.erb
+++ b/cookbooks/nominatim/templates/default/nginx.erb
@@ -114,7 +114,7 @@ map $whitelisted$generic_mozilla$uri $limit_reverse {
 
 limit_req_zone $limit_www zone=www:50m rate=1r/s;
 limit_req_zone $limit_tarpit zone=tarpit:10m rate=1r/s;
-limit_req_zone $binary_remote_addr zone=blocked:10m rate=20r/m;
+limit_req_zone $binary_remote_addr zone=blocked:10m rate=2r/m;
 limit_req_zone $limit_reverse zone=reverse:10m rate=10r/m;
 
 # Fastly CDN IPs