This plugin seems cool

modules/proxy.nix

@@ -79,11 +79,19 @@ in
     enable = true;
     email = "me@${atriDotDad}";
 
+    package = pkgs.caddy.withPlugins {
+      plugins = [ "github.com/jasonlovesdoggo/caddy-defender@v0.10.0" ];
+      hash = lib.fakeHash;
+    };
+
     extraConfig = ''
       (common_config) {
-        # Enable Zstandard and Gzip compression
         encode zstd gzip
 
+        defender garbage {
+          ranges openai deepseek aliyun azurepubliccloud aws gcloud githubcopilot mistral
+        }
+
         header {
           Strict-Transport-Security "max-age=31536000; includeSubDomains; preload"
           X-Content-Type-Options "nosniff"
@@ -137,16 +145,11 @@ in
       vids.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 31008} }
       music.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 30043} }
       books.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 31067} }
+      tv.${atriDotDad} { ${aiBotsMatcher} ${mkProxy 30013} }
 
-      tv.${atriDotDad} {
+      ripkyle.org { ${aiBotsMatcher} ${mkProxy 4321} }
-        ${aiBotsMatcher}
+      ${atashDotDev} { ${aiBotsMatcher} ${mkProxy 6969} }
-        request_body {
+      chronus.${atashDotDev} { ${aiBotsMatcher} ${mkProxy 7337} }
-          max_size 20GB
-        }
-        reverse_proxy http://${upstream}:30013 {
-          flush_interval -1
-        }
-      }
 
       ${matrixDomain} {
         request_body {
@@ -173,10 +176,6 @@ in
           flush_interval -1
         }
       }
-
-      ripkyle.org { ${aiBotsMatcher} ${mkProxy 4321} }
-      ${atashDotDev} { ${aiBotsMatcher} ${mkProxy 6969} }
-      chronus.${atashDotDev} { ${aiBotsMatcher} ${mkProxy 7337} }
     '';
   };