# Add limit_req inside your EXISTING location blocks (do not duplicate try_files/php handlers).

# Register — 3/min
# location ~* /api/auth/register$ {
#     limit_req zone=anifan_auth_register burst=1 nodelay;
#     ... existing fastcgi / try_files ...
# }

# server.php on mail.anifan.az
# location ~* /server\.php/api/auth/register$ {
#     limit_req zone=anifan_auth_register burst=1 nodelay;
# }

# Login — 10/min
# location ~* /api/auth/login$ {
#     limit_req zone=anifan_auth_login burst=3 nodelay;
# }

# Email resend — 6/min
# location ~* /email/resend$ {
#     limit_req zone=anifan_email_resend burst=2 nodelay;
# }

# Full Laravel vhost example (see deploy/nginx/anifan-laravel-server.example.conf)