My Nix Configuration
1bots: 2 # Block scrapers and abusive cloud providers 3 - import: (data)/bots/ai-robots-txt.yaml 4 - import: CUSTOM/block/alibaba-cloud.yaml 5 6 # Allow android apps that I use 7 - name: allow-android-apps 8 user_agent_regex: Nextcloud-android|DAVx5|ICSx5 9 action: ALLOW 10 11 # Allow the Thunderbird Filelink app 12 - name: allow-thunderbird-filelink 13 user_agent_regex: ^Filelink for \*cloud.*$ 14 action: ALLOW 15 16 # Allow anyone accessing the **authenticated** DAV endpoint. 17 - name: allow-dav 18 path_regex: ^/remote.php/dav/.*$ 19 action: ALLOW 20 21 # Allow public shares so that I can more easily send them 22 - name: allow-public-shares 23 path_regex: ^/s/.*$ 24 action: ALLOW 25 26 # Allow clients to load assets to not break public shares 27 - name: allow-assets 28 action: ALLOW 29 expression: 30 any: 31 # Dist files from nextcloud core 32 - 'path.startsWith("/dist/")' 33 # Core Nextcloud files 34 - 'path.startsWith("/js/core")' 35 - 'path.startsWith("/core/css/")' 36 # Viewer app files 37 - 'path.startsWith("/apps/viewer")' 38 # Theme CSS 39 - 'path.startsWith("/apps/theming/")' 40 # Public DAV endpoint 41 - 'path.startsWith("/public.php/dav/files/")' 42 43 - import: (data)/common/keep-internet-working.yaml 44 - import: CUSTOM/challenge/generic-browser.yaml 45 46dnsbl: false