Crowdsec appsec issue?

[YeapGuy]

I'm getting this in the logs when uploading to Nextcloud and it keeps breaking any larger upload:

2024/04/08 18:36:12 [error] 2663#2663: *692 lua tcp socket write timed out, client: 192.168.0.1, server: mine.example.org, request: "PUT /remote.php/dav/uploads/xxx/503406971/00006 HTTP/1.1", host: "mine.example.org"
08 18:36:12 [error] 2663#2663: *692 [lua] crowdsec.lua:578: AppSecCheck(): Fallback because of err: timeout, client: 192.168.0.1, server: mine.example.org, request: "PUT /remote.php/dav/uploads/xxx/503406971/00006 HTTP/1.1", host: "mine.example.org"
2024/04/08 18:36:12 [error] 2663#2663: *692 [lua] crowdsec.lua:651: Allow(): AppSec check: timeout, client: 192.168.0.1, server: mine.example.org, request: "PUT /remote.php/dav/uploads/xxx/503406971/00006 HTTP/1.1", host: "mine.example.org"
2024/04/08 18:36:12 [alert] 2663#2663: *692 [lua] crowdsec.lua:718: Allow(): [Crowdsec] denied '192.168.0.1' with 'ban' (by appsec), client: 192.168.0.1, server: mine.example.org, request: "PUT /remote.php/dav/uploads/xxx/503406971/00006 HTTP/1.1", host: "mine.example.org"

I don't really understand. It seems to be failing to connect to appsec and falling back to banning?? And also, why is it blocking 192.168.0.1 (that's me connecting from LAN with hairpin NAT) when that's in the default whitelist?

[YeapGuy]

This appears to be related to me disabling proxy buffering with the env variable NGINX_DISABLE_PROXY_BUFFERING=true. Once I set that back to the default (false), it seems like the Nextcloud client can upload large files.