1bots:
2 - import: CUSTOM/policies/meta/base.yaml
3 - import: (data)/clients/git.yaml
4 - import: (data)/apps/gitea-rss-feeds.yaml
5
6 # Allow forgejo runner connections from localhost and tailscale
7 - name: forgejo-runner
8 user_agent_regex: connect-go
9 action: ALLOW
10
11dnsbl: false
12openGraph:
13 enabled: true
14 considerHost: false
15 ttl: 24h
16status_codes:
17 CHALLENGE: 200
18 DENY: 200
19thresholds:
20 - name: minimal-suspicion
21 expression: weight <= 0
22 action: ALLOW
23 - name: mild-suspicion
24 expression:
25 all:
26 - weight > 0
27 - weight < 10
28 action: CHALLENGE
29 challenge:
30 # https://anubis.techaro.lol/docs/admin/configuration/challenges/metarefresh
31 algorithm: metarefresh
32 difficulty: 1
33 report_as: 1
34 - name: moderate-suspicion
35 expression:
36 all:
37 - weight >= 10
38 - weight < 20
39 action: CHALLENGE
40 challenge:
41 # https://anubis.techaro.lol/docs/admin/configuration/challenges/proof-of-work
42 algorithm: fast
43 difficulty: 2 # two leading zeros, very fast for most clients
44 report_as: 2
45 - name: mild-proof-of-work
46 expression:
47 all:
48 - weight >= 20
49 - weight < 30
50 action: CHALLENGE
51 challenge:
52 # https://anubis.techaro.lol/docs/admin/configuration/challenges/proof-of-work
53 algorithm: fast
54 difficulty: 4
55 report_as: 4
56 # For clients that are browser like and have gained many points from custom rules
57 - name: extreme-suspicion
58 expression: weight >= 30
59 action: CHALLENGE
60 challenge:
61 # https://anubis.techaro.lol/docs/admin/configuration/challenges/proof-of-work
62 algorithm: fast
63 difficulty: 6
64 report_as: 5