nftables: Increase blackhole threshold.

roles/nftables/templates/nftables.conf

@@ -40,10 +40,10 @@ table inet filter {
 		# Prevent DDoS
 		# Rate limiting
 		meta nfproto ipv4 meter ratelimit4 \
-			{ ip saddr limit rate over 50/second burst 10 packets } \
+			{ ip saddr limit rate over 75/second burst 15 packets } \
 			add @blackhole_ipv4 { ip saddr }
 		meta nfproto ipv6 meter ratelimit6 \
-			{ ip6 saddr limit rate over 50/second burst 10 packets } \
+			{ ip6 saddr limit rate over 75/second burst 15 packets } \
 			add @blackhole_ipv6 { ip6 saddr }
 		# Max concurrent connections
 		meta nfproto ipv4 meter connlimit4 \

roles/nginx/templates/sites-enabled/hedgedoc.conf

@@ -12,5 +12,6 @@ server {
         proxy_pass http://127.0.0.1:{{ ports['hedgedoc'] }};
 
         include /etc/nginx/snippets/websocket.conf;
+        include /etc/nginx/snippets/proxy.conf;
     }
 }

roles/nginx/templates/sites-enabled/jmap.conf

@@ -8,5 +8,6 @@ server {
         proxy_pass https://127.0.0.1:{{ ports['mailserver_jmap'] }};
 
         include /etc/nginx/snippets/websocket.conf;
+        include /etc/nginx/snippets/proxy.conf;
     }
 }

roles/nginx/templates/sites-enabled/syncthing-discovery.conf

@@ -12,5 +12,6 @@ server {
         proxy_set_header X-Client-Port $remote_port;
         proxy_set_header X-SSL-Cert $ssl_client_cert;
         include /etc/nginx/snippets/websocket.conf;
+        include /etc/nginx/snippets/proxy.conf;
     }
 }

roles/nginx/templates/sites-enabled/uptime-kuma.conf

@@ -8,5 +8,6 @@ server {
         proxy_pass http://127.0.0.1:{{ ports['uptime_kuma'] }};
 
          include /etc/nginx/snippets/websocket.conf;
+         include /etc/nginx/snippets/proxy.conf;
     }
 }

roles/nginx/templates/sites-enabled/vaultwarden.conf

@@ -14,5 +14,6 @@ server {
         proxy_pass http://vaultwarden;
 
         include /etc/nginx/snippets/websocket.conf;
+        include /etc/nginx/snippets/proxy.conf;
     }
 }