1bots:
2 # Block scrapers and abusive cloud providers
3 - import: (data)/bots/ai-robots-txt.yaml
4 - import: CUSTOM/block/alibaba-cloud.yaml
5
6 # Allow android apps that I use
7 - name: allow-android-apps
8 user_agent_regex: Nextcloud-android|DAVx5|ICSx5
9 action: ALLOW
10
11 # Allow the Thunderbird Filelink app
12 - name: allow-thunderbird-filelink
13 user_agent_regex: ^Filelink for \*cloud.*$
14 action: ALLOW
15
16 # Allow anyone accessing the **authenticated** DAV endpoint.
17 - name: allow-dav
18 path_regex: ^/remote.php/dav/.*$
19 action: ALLOW
20
21 # Allow public shares so that I can more easily send them
22 - name: allow-public-shares
23 path_regex: ^/s/.*$
24 action: ALLOW
25
26 # Allow clients to load assets to not break public shares
27 - name: allow-assets
28 action: ALLOW
29 expression:
30 any:
31 # Dist files from nextcloud core
32 - 'path.startsWith("/dist/")'
33 # Core Nextcloud files
34 - 'path.startsWith("/js/core")'
35 - 'path.startsWith("/core/css/")'
36 # Viewer app files
37 - 'path.startsWith("/apps/viewer")'
38 # Theme CSS
39 - 'path.startsWith("/apps/theming/")'
40 # Public DAV endpoint
41 - 'path.startsWith("/public.php/dav/files/")'
42
43 - import: (data)/common/keep-internet-working.yaml
44 - import: CUSTOM/challenge/generic-browser.yaml
45
46dnsbl: false