bots:
  # Block scrapers and abusive cloud providers
  - import: (data)/bots/ai-robots-txt.yaml
  - import: CUSTOM/block/alibaba-cloud.yaml
  # Allow android apps that I use
  - name: allow-android-apps
    user_agent_regex: Nextcloud-android|DAVx5|ICSx5
    action: ALLOW
  # Allow the Thunderbird Filelink app
  - name: allow-thunderbird-filelink
    user_agent_regex: ^Filelink for \*cloud.*$
    action: ALLOW
  # Allow anyone accessing the **authenticated** DAV endpoint.
  - name: allow-dav
    path_regex: ^/remote.php/dav/.*$
    action: ALLOW
  # Allow public shares so that I can more easily send them
  - name: allow-public-shares
    path_regex: ^/s/.*$
    action: ALLOW
  # Allow clients to load assets to not break public shares
  - name: allow-assets
    action: ALLOW
    expression:
      any:
        # Dist files from nextcloud core
        - 'path.startsWith("/dist/")'
        # Core Nextcloud files
        - 'path.startsWith("/js/core")'
        - 'path.startsWith("/core/css/")'
        # Viewer app files
        - 'path.startsWith("/apps/viewer")'
        # Theme CSS
        - 'path.startsWith("/apps/theming/")'
        # Public DAV endpoint
        - 'path.startsWith("/public.php/dav/files/")'
  - import: (data)/common/keep-internet-working.yaml
  - import: CUSTOM/challenge/generic-browser.yaml
dnsbl: false