nginx.role/templates/security.conf.j2

#jinja2: lstrip_blocks: True
# {{ ansible_managed }}

# Rate limiting
# https://blog.nginx.org/blog/rate-limiting-nginx
# https://www.techgrube.de/news-und-infos/nginx-rate-limiting-einstellungen-und-funktion
limit_req_zone $binary_remote_addr zone=conn_limit:10m rate=5r/s;

# extras
server_tokens off;
more_set_headers 'Server: UwU';