first commit

templates/security.conf.j2

@@ -0,0 +1,10 @@
+#jinja2: lstrip_blocks: True
+# {{ ansible_managed }}
+
+# Rate limiting
+# https://blog.nginx.org/blog/rate-limiting-nginx
+# https://www.techgrube.de/news-und-infos/nginx-rate-limiting-einstellungen-und-funktion
+limit_req_zone $binary_remote_addr zone=conn_limit:10m rate=5r/s;
+
+# extras
+server_tokens off;