From 5d2fac690e1077c265deed82f7d74b2cc6833c78 Mon Sep 17 00:00:00 2001
From: Dorian <z00york@mac.com>
Date: Sun, 19 Apr 2026 03:36:12 -0400
Subject: [PATCH] =?UTF-8?q?fix(nginx):=20raise=20body-size=20limit=2010m?=
 =?UTF-8?q?=20=E2=86=92=20256m=20for=20mesh/content/dwn=20peer=20paths?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Was seeing "upload failed: 413" on mesh attachment sends between
federated nodes — a ~7MB image becomes ~10MB base64 in the
typed_envelope wire and hit the 10m client_max_body_size on
/archipelago/, /content/, and /dwn/. Bumped those six locations
(two per server block, regular + HTTPS) to 256m so modern
attachments/blobs don't trip the proxy. /rpc/ stays at 1m —
internal JSON-RPC calls are small and don't need the headroom.

Applied to all 4 fleet nodes live; ISO source config updated so
fresh installs get the same limits.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 image-recipe/configs/nginx-archipelago.conf | 12 ++++++------
 1 file changed, 6 insertions(+), 6 deletions(-)

diff --git a/image-recipe/configs/nginx-archipelago.conf b/image-recipe/configs/nginx-archipelago.conf
index cf41cf95..06840dd1 100644
--- a/image-recipe/configs/nginx-archipelago.conf
+++ b/image-recipe/configs/nginx-archipelago.conf
@@ -113,7 +113,7 @@ server {
     # Peer-to-peer node messaging (receives from other nodes over Tor)
     location /archipelago/ {
         limit_req zone=peer burst=20 nodelay;
-        client_max_body_size 10m;
+        client_max_body_size 256m;
         proxy_connect_timeout 30s;
         proxy_read_timeout 60s;
         proxy_send_timeout 30s;
@@ -198,7 +198,7 @@ server {
     # Content sharing — peer access over Tor (no auth)
     location /content {
         limit_req zone=peer burst=20 nodelay;
-        client_max_body_size 10m;
+        client_max_body_size 256m;
         proxy_connect_timeout 30s;
         proxy_read_timeout 60s;
         proxy_send_timeout 30s;
@@ -244,7 +244,7 @@ server {
     # DWN endpoints — peer access over Tor (no auth)
     location /dwn {
         limit_req zone=peer burst=20 nodelay;
-        client_max_body_size 10m;
+        client_max_body_size 256m;
         proxy_connect_timeout 30s;
         proxy_read_timeout 60s;
         proxy_send_timeout 30s;
@@ -922,7 +922,7 @@ server {
 
     location /archipelago/ {
         limit_req zone=peer burst=20 nodelay;
-        client_max_body_size 10m;
+        client_max_body_size 256m;
         proxy_connect_timeout 30s;
         proxy_read_timeout 60s;
         proxy_send_timeout 30s;
@@ -986,7 +986,7 @@ server {
     # Content sharing — peer access over Tor (no auth)
     location /content {
         limit_req zone=peer burst=20 nodelay;
-        client_max_body_size 10m;
+        client_max_body_size 256m;
         proxy_connect_timeout 30s;
         proxy_read_timeout 60s;
         proxy_send_timeout 30s;
@@ -1032,7 +1032,7 @@ server {
     # DWN endpoints — peer access over Tor (no auth)
     location /dwn {
         limit_req zone=peer burst=20 nodelay;
-        client_max_body_size 10m;
+        client_max_body_size 256m;
         proxy_connect_timeout 30s;
         proxy_read_timeout 60s;
         proxy_send_timeout 30s;