Add limit_except and limit_rate

domcloud · Oct 2, 2024 · fdd440e · fdd440e
1 parent bcebb01
commit fdd440e
Show file tree

Hide file tree

Showing 4 changed files with 18 additions and 4 deletions.
diff --git a/package-lock.json b/package-lock.json
diff --git a/package.json b/package.json
@@ -1,6 +1,6 @@
 {
   "name": "domcloud-bridge",
-  "version": "0.61.0",
+  "version": "0.62.0",
   "description": "Deployment runner for DOM Cloud",
   "main": "app.js",
   "engines": {

diff --git a/src/executor/nginx.js b/src/executor/nginx.js
@@ -22,7 +22,8 @@ const passengerKeys = [
 ];
 const locationKeys = [
     "root", "alias", "rewrite", "try_files", "return", "index",
-    "expires", "allow", "deny", "autoindex", "proxy_pass"
+    "expires", "allow", "deny", "autoindex", "proxy_pass", 
+    "limit_except", "limit_rate", "limit_rate_after"
 ];
 const sslNames = ["", "off", "always", "on"];
 const wwwNames = ["", "off", "always", "on"];
@@ -49,6 +50,16 @@ class NginxExecutor {
                     } else if (/^http:\/\/127\.\d+\.\d+\.\d+:\d+(\$.+|\/.+)?$/.test(config[key])) {
                         node._add(key, config[key]);
                     }
+                } else if (key == "limit_except") {
+                    node._add(key, config[key], [{
+                        children: null,
+                        comments: null,
+                        isBlock: false,
+                        isVerbatim: false,
+                        name: "deny",
+                        parent: null,
+                        value: "all",
+                    }]);
                 } else {
                     node._add(key, config[key]);
                 }

diff --git a/test/nginx.d/complex.net.conf b/test/nginx.d/complex.net.conf
@@ -34,6 +34,9 @@ server {
         passenger_env_var HTTP_SECURITY_AAAAA 'public';
         passenger_env_var HTTP_SECURITY_BBBBB 'public';
         passenger_env_var HTTP_SECURITY_LEVEL 'public';
+        limit_except GET POST {
+            deny all;
+        }
     }
     location ~ \.php(/|$) {
         try_files $uri =404;