# Include in the application's proxied location /, before proxy_pass.
# return-only if is safe here; intercepted upstream errors remain disabled.
error_page 429 = @anonymous_bulk_limited;
if ($anonymous_reject_bulk) { return 429; }
limit_req zone=anonymous_file_requests burst=60 nodelay;
limit_req zone=anonymous_listing_requests burst=30 nodelay;
limit_req_status 429;
limit_req_log_level notice;