From: Grant Slater <github@firefishy.com>
Date: Tue, 12 Mar 2024 12:31:14 +0000 (+0000)
Subject: apache: set our correct defaults for mod_evasive
X-Git-Url: https://git.openstreetmap.org/chef.git/commitdiff_plain/976235eeb788f112ffda275b1372aa3ddd146ab5

apache: set our correct defaults for mod_evasive
---

diff --git a/cookbooks/apache/attributes/default.rb b/cookbooks/apache/attributes/default.rb
index 793881ea5..557085b56 100644
--- a/cookbooks/apache/attributes/default.rb
+++ b/cookbooks/apache/attributes/default.rb
@@ -32,8 +32,8 @@ default[:apache][:buffered_logs] = true
 
 default[:apache][:evasive][:enable] = true
 default[:apache][:evasive][:dos_hash_table_size] =  65536
-default[:apache][:evasive][:dos_page_count]      =  250
-default[:apache][:evasive][:dos_site_count]      =  500
+default[:apache][:evasive][:dos_page_count]      =  50
+default[:apache][:evasive][:dos_site_count]      =  250
 default[:apache][:evasive][:dos_page_interval]   =  1
 default[:apache][:evasive][:dos_site_interval]   =  1
 default[:apache][:evasive][:dos_blocking_period] =  60
diff --git a/roles/wiki.rb b/roles/wiki.rb
index 1e19d9df1..9322e27d4 100644
--- a/roles/wiki.rb
+++ b/roles/wiki.rb
@@ -15,6 +15,10 @@ default_attributes(
       :max_request_workers => 800,
       :threads_per_child => 50,
       :max_connections_per_child => 10000
+    },
+    :evasive => {
+      :dos_page_count =>  250,
+      :dos_site_count =>  500
     }
   },
   :elasticsearch => {