Add HAProxy PoW challenge, simple bad bot blocking, and adjust mounts
All checks were successful
Build And Deploy / build-and-deploy (push) Successful in 1m16s

Replace single deploy/haproxy.cfg with deploy/haproxy/{haproxy.cfg,challenge.html}.
HAProxy now runs a WebCrypto-based proof-of-work challenge using a stick-table,
URI normalization and a challenge backend. docker-compose mounts the haproxy
directory, and also switches the site DB volume to ./db to be consistent. Update robots.txt.ts to
add a honeypot path for bad bot blocking.
This commit is contained in:
badblocks 2026-02-08 12:50:28 -08:00
parent 1162c53c8f
commit f014330b14
No known key found for this signature in database
5 changed files with 233 additions and 45 deletions

View file

@ -4,7 +4,7 @@ services:
restart: always
container_name: badblocks-personal-site
volumes:
- /srv/badblocks-personal-site/db:/db
- ./db:/db
networks:
- proxynet
env_file:
@ -70,7 +70,7 @@ services:
- "${PUBLIC_IP}:443:443"
- "${PUBLIC_IP}:8404:8404"
volumes:
- ./haproxy.cfg:/usr/local/etc/haproxy/haproxy.cfg:ro
- ./haproxy:/usr/local/etc/haproxy:ro
- ./certs:/certs:ro
restart: always
networks: