Skip to content

Commit 8ab12a6

Browse files
akihikodakiGargron
authored andcommitted
Limit client max body size in the nginx configuration example (mastodon#579)
As Mastodon temporaliry saves uploaded content to memory and disk (if /tmp is a disk), unlimiting client max body size makes the server vulnerable to DoS attack.
1 parent 42e5e85 commit 8ab12a6

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

Running-Mastodon/Production-guide.md

+1-1
Original file line numberDiff line numberDiff line change
@@ -220,7 +220,7 @@ server {
220220
221221
keepalive_timeout 70;
222222
sendfile on;
223-
client_max_body_size 0;
223+
client_max_body_size 8m;
224224
225225
root /home/mastodon/live/public;
226226

0 commit comments

Comments
 (0)