# Include in each HTTPS application server block, outside location /.
location @anonymous_bulk_limited {
    default_type application/json;
    add_header Retry-After $anonymous_bulk_retry always;
    add_header Cache-Control "no-store" always;
    return 429 '{"error":"rate_limited","message":"Too many individual file or directory requests. Use the repository ZIP download for bulk access."}';
}