I have an issue where I try uploading from my mobile device and laptop, 3 MP4 files. One 8MB, another 80MB and one 115MB. I have tried uploading them through the web interface. the mobile and desktop clients. The 8MB file uploads with no issue but the 80 and 115MB files spits out the following errors. The web interface is giving me a Operation not permitted error. The mobile client is giving me Permission error and the desktop client is giving me a 403 Forbidden.
I am behind Cloudflare DNS that is pointing to my TrueNAS server using NPMPlus which is a fork of Nginx Proxy Manager.
Upon inspecing NPMPlus logs, I find the following log entry:
2025/04/03 19:53:53 [error] 471#471: *60 Request body limit is marked to reject the request, client: [REDACTED], server: [REDACTED], request: "PUT /remote.php/dav/uploads/user/e4acb6a17939fdee0a36604c1b55799b/000001 HTTP/2.0", host: "[REDACTED]"
I did some research and found it was the ModSecurity module for NPMPlus that was preventing larger upload sizes. I disable ModSecurity in the NPMPlus webUI and I can now upload those 80 and 115MB MP4 files. Problem resolved.
EDIT:
I change SecRequestBodyLimit line in npmplus/modsecurity/modsecurity-default.conf:
# Maximum request body size we will accept for buffering. If you support
# file uploads then the value given on the first line has to be as large
# as the largest file you are willing to accept. The second value refers
# to the size of data, with files excluded. You want to keep that value as
# low as practical.
#
# SecRequestBodyLimit 13107200 This old value prevents larger uploads
# 10740000000 == 10 Gigabytes in bytes
SecRequestBodyLimit 10740000000
SecRequestBodyNoFilesLimit 131072
I then reenable ModSecurity in the NPMPlus UI and I can upload any file up to 10GB in size.