Frank
2a72efad44
Login/PoW/POST traffic to the outpost URL space cannot solve a fresh PoW challenge per request; exempt the transport prefix (authentik's own session gate still protects it) so the guarded-host sign-in journey completes.
26 lines
735 B
JSON
26 lines
735 B
JSON
{
|
|
"bots": [
|
|
{
|
|
"name": "deny AI scrapers",
|
|
"user_agent_regex": "(?i)^(GPTBot|ChatGPT-User|OAI-SearchBot|CCBot|anthropic-ai|ClaudeBot|Claude-Web|PerplexityBot|PerplexityUser|Google-Extended|Applebot-Extended|Bytespider|Amazonbot|meta-externalagent|DuckAssistBot|cohere-ai|YouBot|KimiBot)",
|
|
"action": "DENY"
|
|
},
|
|
{
|
|
"name": "serve anubis own endpoints",
|
|
"path_regex": "^/\\.within\\.website",
|
|
"action": "ALLOW"
|
|
},
|
|
{
|
|
"name": "serve authentik outpost transport",
|
|
"path_regex": "^/outpost\\.goauthentik\\.io/",
|
|
"action": "ALLOW"
|
|
},
|
|
{
|
|
"name": "challenge everything else",
|
|
"path_regex": ".",
|
|
"action": "CHALLENGE"
|
|
}
|
|
],
|
|
"dnsbl": false
|
|
}
|