From 976235eeb788f112ffda275b1372aa3ddd146ab5 Mon Sep 17 00:00:00 2001
From: Grant Slater <github@firefishy.com>
Date: Tue, 12 Mar 2024 12:31:14 +0000
Subject: [PATCH] apache: set our correct defaults for mod_evasive

---
 cookbooks/apache/attributes/default.rb | 4 ++--
 roles/wiki.rb                          | 4 ++++
 2 files changed, 6 insertions(+), 2 deletions(-)

diff --git a/cookbooks/apache/attributes/default.rb b/cookbooks/apache/attributes/default.rb
index 793881ea5..557085b56 100644
--- a/cookbooks/apache/attributes/default.rb
+++ b/cookbooks/apache/attributes/default.rb
@@ -32,8 +32,8 @@ default[:apache][:buffered_logs] = true
 
 default[:apache][:evasive][:enable] = true
 default[:apache][:evasive][:dos_hash_table_size] =  65536
-default[:apache][:evasive][:dos_page_count]      =  250
-default[:apache][:evasive][:dos_site_count]      =  500
+default[:apache][:evasive][:dos_page_count]      =  50
+default[:apache][:evasive][:dos_site_count]      =  250
 default[:apache][:evasive][:dos_page_interval]   =  1
 default[:apache][:evasive][:dos_site_interval]   =  1
 default[:apache][:evasive][:dos_blocking_period] =  60
diff --git a/roles/wiki.rb b/roles/wiki.rb
index 1e19d9df1..9322e27d4 100644
--- a/roles/wiki.rb
+++ b/roles/wiki.rb
@@ -15,6 +15,10 @@ default_attributes(
       :max_request_workers => 800,
       :threads_per_child => 50,
       :max_connections_per_child => 10000
+    },
+    :evasive => {
+      :dos_page_count =>  250,
+      :dos_site_count =>  500
     }
   },
   :elasticsearch => {
-- 
2.45.1