diff --git a/modules/proxy.nix b/modules/proxy.nix index be11cf5..6dfb71c 100644 --- a/modules/proxy.nix +++ b/modules/proxy.nix @@ -79,11 +79,19 @@ in enable = true; email = "me@${atriDotDad}"; + package = pkgs.caddy.withPlugins { + plugins = [ "github.com/jasonlovesdoggo/caddy-defender@v0.10.0" ]; + hash = lib.fakeHash; + }; + extraConfig = '' (common_config) { - # Enable Zstandard and Gzip compression encode zstd gzip + defender garbage { + ranges openai deepseek aliyun azurepubliccloud aws gcloud githubcopilot mistral + } + header { Strict-Transport-Security "max-age=31536000; includeSubDomains; preload" X-Content-Type-Options "nosniff" @@ -137,16 +145,11 @@ in vids.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 31008} } music.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 30043} } books.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 31067} } + tv.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 30013} } - tv.${atriDotDad} { - ${aiBotsMatcher} - request_body { - max_size 20GB - } - reverse_proxy http://${upstream}:30013 { - flush_interval -1 - } - } + ripkyle.org { ${aiBotsMatcher} ${mkProxy 4321} } + ${atashDotDev} { ${aiBotsMatcher} ${mkProxy 6969} } + chronus.${atashDotDev} { ${aiBotsMatcher} ${mkProxy 7337} } ${matrixDomain} { request_body { @@ -173,10 +176,6 @@ in flush_interval -1 } } - - ripkyle.org { ${aiBotsMatcher} ${mkProxy 4321} } - ${atashDotDev} { ${aiBotsMatcher} ${mkProxy 6969} } - chronus.${atashDotDev} { ${aiBotsMatcher} ${mkProxy 7337} } ''; };