Better security in ratelimit conf

gagan0123 · Sep 18, 2019 · 06dacba · 06dacba
1 parent 64b5aa5
commit 06dacba
Showing 1 changed file with 9 additions and 1 deletion.
diff --git a/configs/nginx-common/ratelimit.conf b/configs/nginx-common/ratelimit.conf
@@ -1,6 +1,14 @@
 # Limit access to avoid brute force attack
-location = /wp-login.php {
+location ~* ^/wp-login.php {
   limit_req zone=login burst=10 nodelay;
   include fastcgi.conf;
   fastcgi_pass $fpmpool;
 }
+location ~* ^/wp-admin/admin-ajax.php$ {
+  allow all;
+}
+location ~* ^/wp-admin/.*\.php {
+  limit_req zone=admin burst=10 nodelay;
+  include fastcgi.conf;
+  fastcgi_pass $fpmpool; 
+}