Nginx layer-7 ddos nginx config?

hey guys

---

how can i set up r/s limit for PHP documents properly?

from what i know have to use fast cgi for php..

limit_req_zone $binary_remote_addr zone=one:10m rate=1r/s;
limit_req zone=one burst=1 nodelay;

i use this now but it works everywhere, not only php and for some reason in the error logs it keep limiting each request i make lol

 

now, i dont think i even use fastcgi but how would i do it?

it keeps downloading the page when i try

location ~ \.php$ {

 

location ~*(\.php)$ {
limit_req zone=one burst=5;
}

keeps downloading the entire php page lol D: same with others i tried..

 

i had to add it to php.conf got it working yay

 

I'm using request limit, however in order to use fail2ban with CloudFlare. I need to use their api, which i am completly fine with.

Anyone here able to help me out setting it up for some small cash?

actionban = curl -s "https://www.cloudflare.com/api.html?a=ban&key=<ip>&u=<account>&tkn=<token>"
actionunban = curl -s "https://www.cloudflare.com/api.html?a=nul&key=<ip>&u=<account>&tkn=<token>"

For request limit.

This works PERFECTLY, with IP Tables. However with CloudFlare, nope:
Survive DDOS attack with Nginx's and fail2ban

I want to use this, with these two commands to ban and unban.