gitlab: rate-limit gitlab-pages

Implement ip based rate limiting on gitlab-pages. This ensures we avoid slowing down the gitlab server when extensive requests are made against our gitlab-pages like WKD sync from Archlinux keyring service

https://docs.gitlab.com/ee/administration/pages/#rate-limits

Signed-off-by: Leonidas Spyropoulos artafinde@archlinux.org

roles/gitlab/tasks/main.yml

@@ -39,6 +39,9 @@
         pages_nginx['enable'] = false
         gitlab_pages['external_http'] = {{ gitlab_pages_http_addresses }}
         gitlab_pages['external_https'] = {{ gitlab_pages_https_addresses }}
+        gitlab_pages['rate_limit_source_ip'] = 10.0
+        gitlab_pages['rate_limit_source_ip_burst'] = 300
+        gitlab_pages['env'] = {'FF_ENFORCE_IP_RATE_LIMITS' => 'true'}
         letsencrypt['enable'] = true
         letsencrypt['contact_emails'] = ['webmaster@archlinux.org']
         gitlab_rails['lfs_enabled'] = true