more strict rate limiting to make scanners less effective

nginx/nginx.conf

@@ -11,7 +11,7 @@ events {
 http {
     include /etc/nginx/mime.types;
     default_type application/octet-stream;
-    limit_req_zone $binary_remote_addr zone=mylimit:10m rate=3r/s;
+    limit_req_zone $binary_remote_addr zone=mylimit:10m rate=1r/s;
 
     log_format main '$remote_addr - $remote_user [$time_local] "$request" '
                     '$status $body_bytes_sent "$http_referer" '
@@ -41,7 +41,7 @@ server {
     ssl_certificate_key /etc/letsencrypt/live/waze.papko.org/privkey.pem;
 
     location / {
-        limit_req zone=mylimit burst=10 nodelay;
+        limit_req zone=mylimit burst=3 nodelay;
         proxy_pass http://gtw:5000;
         proxy_set_header Host $host;
         proxy_set_header X-Real-IP $remote_addr;