# General request limit per IP
limit_req_zone $binary_remote_addr zone=general:10m rate=30r/s;

# Static asset scraping control
limit_req_zone $binary_remote_addr zone=static:10m rate=10r/s;

# API abuse protection
limit_req_zone $binary_remote_addr zone=api:10m rate=5r/s;