From: Grant Slater <github@firefishy.com>
Date: Tue, 12 Mar 2024 12:17:31 +0000 (+0000)
Subject: apache: relax mod_evasive further
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/953568ac810971babd2c310ca6b8e1a0a30793a5

apache: relax mod_evasive further
---

diff --git a/cookbooks/apache/attributes/default.rb b/cookbooks/apache/attributes/default.rb
index 557085b56..793881ea5 100644
--- a/cookbooks/apache/attributes/default.rb
+++ b/cookbooks/apache/attributes/default.rb
@@ -32,8 +32,8 @@ default[:apache][:buffered_logs] = true
 
 default[:apache][:evasive][:enable] = true
 default[:apache][:evasive][:dos_hash_table_size] =  65536
-default[:apache][:evasive][:dos_page_count]      =  50
-default[:apache][:evasive][:dos_site_count]      =  250
+default[:apache][:evasive][:dos_page_count]      =  250
+default[:apache][:evasive][:dos_site_count]      =  500
 default[:apache][:evasive][:dos_page_interval]   =  1
 default[:apache][:evasive][:dos_site_interval]   =  1
 default[:apache][:evasive][:dos_blocking_period] =  60
diff --git a/cookbooks/apache/templates/default/evasive.conf.erb b/cookbooks/apache/templates/default/evasive.conf.erb
index 2670f3e15..d3014825d 100644
--- a/cookbooks/apache/templates/default/evasive.conf.erb
+++ b/cookbooks/apache/templates/default/evasive.conf.erb
@@ -1,10 +1,10 @@
 # DO NOT EDIT - This file is being maintained by Chef
 
 <IfModule mod_evasive20.c>
-    DOSHashTableSize <%= node[:apache][:evasive][:dos_hash_table_size] %>
-    DOSPageCount <%= node[:apache][:evasive][:dos_page_count] %>
-    DOSSiteCount <%= node[:apache][:evasive][:dos_site_count] %>
-    DOSPageInterval <%= node[:apache][:evasive][:dos_page_interval] %>
-    DOSSiteInterval <%= node[:apache][:evasive][:dos_site_interval] %>
-    DOSBlockingPeriod <%= node[:apache][:evasive][:dos_blocking_period] %>
+    DOSHashTableSize    <%= node[:apache][:evasive][:dos_hash_table_size] %>
+    DOSPageCount        <%= node[:apache][:evasive][:dos_page_count] %>
+    DOSSiteCount        <%= node[:apache][:evasive][:dos_site_count] %>
+    DOSPageInterval     <%= node[:apache][:evasive][:dos_page_interval] %>
+    DOSSiteInterval     <%= node[:apache][:evasive][:dos_site_interval] %>
+    DOSBlockingPeriod   <%= node[:apache][:evasive][:dos_blocking_period] %>
 </IfModule>