From 1ddaf32edf47516db8c8644122b9f040b598d4ed Mon Sep 17 00:00:00 2001
From: glass beadian <glassbeadian@hdys.band>
Date: Thu, 15 Oct 2026 08:46:50 +0000
Subject: [PATCH] =?UTF-8?q?fix:=20raise=20upload=20limits=20=E2=80=94=20ap?=
 =?UTF-8?q?i=202=20GiB,=20nginx=202g=20(was=20100=20MiB=20api=20/=2020m-51?=
 =?UTF-8?q?2m=20nginx)?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Cloudflare free caps at 100 MB on the proxied route regardless; larger
files need the domain set to DNS-only or a chunked upload path.
---
 apps/api/src/video/upload-limits.ts |  2 +-
 infra/occupymedia/edge/nginx.conf   | 14 +++++++-------
 2 files changed, 8 insertions(+), 8 deletions(-)

diff --git a/apps/api/src/video/upload-limits.ts b/apps/api/src/video/upload-limits.ts
index 5f79e64..0cfa028 100644
--- a/apps/api/src/video/upload-limits.ts
+++ b/apps/api/src/video/upload-limits.ts
@@ -1,2 +1,2 @@
 // StorageService seals whole Buffers; bound multipart memory use per request.
-export const MAX_VIDEO_UPLOAD_BYTES = 100 * 1024 * 1024;
+export const MAX_VIDEO_UPLOAD_BYTES = 2 * 1024 * 1024 * 1024;
diff --git a/infra/occupymedia/edge/nginx.conf b/infra/occupymedia/edge/nginx.conf
index 3e71c26..b9a20bf 100644
--- a/infra/occupymedia/edge/nginx.conf
+++ b/infra/occupymedia/edge/nginx.conf
@@ -38,7 +38,7 @@ http {
     ssl_certificate     /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
 
-    client_max_body_size 512m;
+    client_max_body_size 2g;
     location / {
       proxy_pass http://web:3001;
       proxy_http_version 1.1;
@@ -61,7 +61,7 @@ http {
     ssl_certificate     /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
 
-    client_max_body_size 512m;
+    client_max_body_size 2g;
     location / {
       proxy_pass http://api:3000;
       proxy_http_version 1.1;
@@ -250,7 +250,7 @@ http {
       proxy_read_timeout 3600s;
       proxy_send_timeout 3600s;
       proxy_buffering off;
-      client_max_body_size 512m;
+      client_max_body_size 2g;
       # oCIS web's index.html carries ownCloud branding before the app mounts
       # (title, blue theme-color, white/blue splash) — rewrite at the edge.
       proxy_set_header Accept-Encoding "";
@@ -271,7 +271,7 @@ http {
     ssl_certificate     /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
 
-    client_max_body_size 512m;
+    client_max_body_size 2g;
     location = /themes/owncloud/theme.json {
       default_type application/json;
       alias /opt/occ-brand/hub-theme.json;
@@ -358,7 +358,7 @@ http {
     ssl_certificate     /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
 
-    client_max_body_size 20m;
+    client_max_body_size 2g;
     location / {
       proxy_pass http://occ-intake:3000;
       proxy_http_version 1.1;
@@ -415,7 +415,7 @@ http {
       proxy_read_timeout 3600s;
       proxy_send_timeout 3600s;
       proxy_buffering off;
-      client_max_body_size 80m;
+      client_max_body_size 2g;
     }
   }
 
@@ -427,7 +427,7 @@ http {
     ssl_certificate     /etc/letsencrypt/live/occupymedia.cc/fullchain.pem;
     ssl_certificate_key /etc/letsencrypt/live/occupymedia.cc/privkey.pem;
 
-    client_max_body_size 80m;
+    client_max_body_size 2g;
     location ~ ^/api/v1/streaming {
       proxy_pass http://192.168.13.221:4040;
       proxy_http_version 1.1;