Conversation
Sigh... I got anubis proof-of-work bot working in pre-production. I can't express how much I hate this.
3
4
15

@monsieuricon good luck with the deployment! I'm also working on binary packages but don't want to fuck it up.

1
0
0

@monsieuricon is it worth disabling blame in cgit, or perhaps it's not that big of factor for the AI/scraper headaches?

1
0
0

@monsieuricon I've been looking into 'haproxy-protection' which, as the name implies, uses haproxy with lua extensions to implement something similar to anubis with less anime waifus.

1
0
1
@mjeanson i don't care about the waifus, but I do like haproxy!
0
0
1
@xexaxo just accessing millions of commit objects from millions of ips is bad enough without git blame ot other expensive endpoints, honestly.
0
0
1
@cadey thank you for your work on this. Wish it wasn't needed, but it looks like some kind of proof-of-something is going to be required for all public resources.
1
0
0

@monsieuricon No problem. I wish it wasn't needed either, but I'm glad it's helping.

It's kinda wild from my side though, I just made something because I thought it would be useful and now I've got a project that I need to be careful about how I make changes to lol

1
0
0
@cadey now I just need to figure out how to allowlist our monitoring bots. :) I do see the bot/useragent js file, but I'm not sure I want to rebuild the binary each time that requires updating.
1
0
0

@monsieuricon You can pass a bot policy file with the flag --policy-fname or envvar POLICY_FNAME. If you are installing Anubis to the system globally, I'd suggest installing your policy file to /etc/anubis/instancename.botPolicies.json.

1
0
0
@cadey Thank you for the pointer!
0
0
0