Jason Cameron
33ea6c714f
fix: replace checker.NewMapIterator with newMapIterator for HTTPHeaders and URLValues
...
Signed-off-by: Jason Cameron <jason.cameron@stanwith.me >
2026-02-18 12:47:15 -05:00
Jason Cameron
8e9b641280
fix: implement map iterators for HTTPHeaders and URLValues to resolve CEL internal errors
...
Signed-off-by: Jason Cameron <jason.cameron@stanwith.me >
2026-02-18 12:46:26 -05:00
Jason Cameron
d21c67f902
test: add unit tests for CELChecker map iteration
...
Signed-off-by: Jason Cameron <jason.cameron@stanwith.me >
2026-02-18 12:46:26 -05:00
Jason Cameron
19e82973af
fix: enable CEL iterators
...
Signed-off-by: Jason Cameron <jason.cameron@stanwith.me >
2026-02-18 12:46:26 -05:00
Xe Iaso
35b5e78a0d
chore: tag v1.25.0
...
Signed-off-by: Xe Iaso <me@xeiaso.net >
2026-02-18 15:56:28 +00:00
Martin
4e0df8c643
feat(docs): Add HAProxy Configurations to Docs ( #1424 )
...
* Add HAProxy docs
* Add changes to Changelog
* Add CodeBlock import to haproxy.mdc
* Fix typos
* Add exceptions to spelling
2026-02-15 10:32:32 -05:00
dependabot[bot]
c34ec67777
build(deps): bump the npm group across 1 directory with 2 updates ( #1452 )
...
Bumps the npm group with 2 updates in the / directory: [preact](https://github.com/preactjs/preact ) and [esbuild](https://github.com/evanw/esbuild ).
Updates `preact` from 10.28.2 to 10.28.3
- [Release notes](https://github.com/preactjs/preact/releases )
- [Commits](https://github.com/preactjs/preact/compare/10.28.2...10.28.3 )
Updates `esbuild` from 0.27.2 to 0.27.3
- [Release notes](https://github.com/evanw/esbuild/releases )
- [Changelog](https://github.com/evanw/esbuild/blob/main/CHANGELOG.md )
- [Commits](https://github.com/evanw/esbuild/compare/v0.27.2...v0.27.3 )
---
updated-dependencies:
- dependency-name: preact
dependency-version: 10.28.3
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm
- dependency-name: esbuild
dependency-version: 0.27.3
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: npm
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-15 10:32:07 -05:00
dependabot[bot]
61026976ec
build(deps): bump the github-actions group across 1 directory with 6 updates ( #1453 )
...
Bumps the github-actions group with 6 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
| [docker/login-action](https://github.com/docker/login-action ) | `3.6.0` | `3.7.0` |
| [actions/attest-build-provenance](https://github.com/actions/attest-build-provenance ) | `3.1.0` | `3.2.0` |
| [actions-hub/kubectl](https://github.com/actions-hub/kubectl ) | `1.35.0` | `1.35.1` |
| [actions/cache](https://github.com/actions/cache ) | `5.0.2` | `5.0.3` |
| [amannn/action-semantic-pull-request](https://github.com/amannn/action-semantic-pull-request ) | `5.5.3` | `6.1.1` |
| [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ) | `7.2.0` | `7.3.0` |
Updates `docker/login-action` from 3.6.0 to 3.7.0
- [Release notes](https://github.com/docker/login-action/releases )
- [Commits](5e57cd1181...c94ce9fb46https://github.com/actions/attest-build-provenance/releases )
- [Changelog](https://github.com/actions/attest-build-provenance/blob/main/RELEASE.md )
- [Commits](00014ed6ed...96278af6cahttps://github.com/actions-hub/kubectl/releases )
- [Commits](f6d776bd78...3ece3793e7https://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](8b402f58fb...cdf6c1fa76https://github.com/amannn/action-semantic-pull-request/releases )
- [Changelog](https://github.com/amannn/action-semantic-pull-request/blob/main/CHANGELOG.md )
- [Commits](0723387faa...48f256284bhttps://github.com/astral-sh/setup-uv/releases )
- [Commits](61cb8a9741...eac588ad8dsupport@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-02-15 10:31:51 -05:00
Xe Iaso
189c5c021c
chore: sync logo submissions ( #1455 )
...
* chore: sync logo submissions
Closes : #1447
Closes : #1438
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: update spelling
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
2026-02-15 15:29:32 +00:00
Martin
dde186150b
feat(docs): Add ANEXIA Sponsor logo ( #1409 )
...
* Add ANEXIA Sponsor logo
* Add changes to CHANGELOG.md
* Add missing words to spelling expect.txt
---------
Signed-off-by: Xe Iaso <xe.iaso@techaro.lol >
Co-authored-by: Xe Iaso <xe.iaso@techaro.lol >
2026-02-15 15:21:44 +00:00
Xe Iaso
a98f721957
docs: add AI coding tools policy ( #1454 )
...
* docs: add AI coding tools policy
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: remove symlinks
Signed-off-by: Xe Iaso <me@xeiaso.net >
* docs(AGENTS): make compatible with opencode
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: update spelling
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
2026-02-15 15:08:59 +00:00
hyperdefined
03f5e0d542
feat(apps): add updown.io policy ( #1444 )
2026-02-15 08:21:39 -05:00
Kurt McKee
b4f15a5d16
Fix a CI warning: "The set-output command is deprecated" ( #1443 )
2026-02-15 08:19:43 -05:00
Xe Iaso
bf5d66222c
chore: set up commitlint, husky, and prettier ( #1451 )
...
* chore: add prettier configuration
Signed-off-by: Xe Iaso <me@xeiaso.net >
* format: run prettier tree-wide
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore(prettier): ignore intentionally ungrammatical files
Signed-off-by: Xe Iaso <me@xeiaso.net >
* ci: add PR title lint rule
Signed-off-by: Xe Iaso <me@xeiaso.net >
* ci: add DCO check
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: add commitlint and husky
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: add CONTRIBUTING guidelines
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: set SKIP_INTEGRATION in precommit tests
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: update spelling
Signed-off-by: Xe Iaso <me@xeiaso.net >
* ci(dco): remove reopened trigger
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: remove dead file
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore(prettier): don't format nginx includes
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
2026-02-15 08:19:12 -05:00
Bart Louwers
005750903d
Improve Dutch translations ( #1446 )
...
* Improve horrible machine translated Dutch translations
Signed-off-by: Bart Louwers <bart.louwers@gmail.com >
* Apply suggestion from @louwers
Signed-off-by: Bart Louwers <bart.louwers@gmail.com >
* Apply suggestion from @louwers
Signed-off-by: Bart Louwers <bart.louwers@gmail.com >
* Apply suggestion from @louwers
Signed-off-by: Bart Louwers <bart.louwers@gmail.com >
* Apply suggestion from @louwers
Signed-off-by: Bart Louwers <bart.louwers@gmail.com >
* Update check-spelling metadata
---------
Signed-off-by: Bart Louwers <bart.louwers@gmail.com >
Co-authored-by: Jason Cameron <git@jsn.cam >
2026-02-14 21:08:34 +00:00
dependabot[bot]
d2205b11a7
build(deps): bump the github-actions group with 4 updates ( #1425 )
...
Bumps the github-actions group with 4 updates: [actions/checkout](https://github.com/actions/checkout ), [actions/setup-node](https://github.com/actions/setup-node ), [actions/setup-go](https://github.com/actions/setup-go ) and [actions/cache](https://github.com/actions/cache ).
Updates `actions/checkout` from 6.0.1 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases )
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md )
- [Commits](8e8c483db8...de0fac2e45https://github.com/actions/setup-node/releases )
- [Commits](395ad32622...6044e13b5dhttps://github.com/actions/setup-go/releases )
- [Commits](4dc6199c7b...7a3fe6cf4chttps://github.com/actions/cache/releases )
- [Changelog](https://github.com/actions/cache/blob/main/RELEASES.md )
- [Commits](9255dc7a25...8b402f58fbsupport@github.com >
Co-authored-by: Jason Cameron <git@jsn.cam >
2026-01-28 13:50:19 -05:00
Bertrand Jacquin
09f6f4b153
web: fix spacing/indent ( #1423 )
...
web/index.templ CSS contains a mix bag of tab/space along with unaligned
inner CSS. This commit brings consistency
2026-01-24 21:27:16 -05:00
Matthias Dötsch
d2bc5cadb9
performance: remove significant overhead of decaymap ( #1420 )
...
I have ~5% base CPU load on an idle server due to mutex 100x per second.
Signed-off-by: Matthias Dötsch <matze@mdoetsch.de >
2026-01-22 19:03:17 +00:00
Jason Cameron
23ec1b82a7
chore: add comments back to Challenge struct. ( #1419 )
...
See #1284
and https://github.com/TecharoHQ/anubis/pull/1284#issuecomment-3784096905
2026-01-22 14:52:15 +00:00
dependabot[bot]
d622675edc
build(deps): bump preact from 10.28.1 to 10.28.2 in the npm group ( #1412 )
...
Bumps the npm group with 1 update: [preact](https://github.com/preactjs/preact ).
Updates `preact` from 10.28.1 to 10.28.2
- [Release notes](https://github.com/preactjs/preact/releases )
- [Commits](https://github.com/preactjs/preact/compare/10.28.1...10.28.2 )
---
updated-dependencies:
- dependency-name: preact
dependency-version: 10.28.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Jason Cameron <git@jsn.cam >
2026-01-22 09:50:34 -05:00
dependabot[bot]
493a957f4b
build(deps): bump astral-sh/setup-uv in the github-actions group ( #1413 )
...
Bumps the github-actions group with 1 update: [astral-sh/setup-uv](https://github.com/astral-sh/setup-uv ).
Updates `astral-sh/setup-uv` from 7.1.6 to 7.2.0
- [Release notes](https://github.com/astral-sh/setup-uv/releases )
- [Commits](681c641aba...61cb8a9741git@jsn.cam >
2026-01-22 09:49:50 -05:00
Timon de Groot
57c0b2b22c
Add IP mapped Perplexity user agents ( #1393 )
...
Perplexity has some proper documentation available for their crawlers,
with published IP addresses: https://docs.perplexity.ai/guides/bots .
Signed-off-by: Timon de Groot <timon.degroot@team.blue >
2026-01-15 19:57:31 -05:00
Thomas Arrow
186ffeb744
docs: clarify botstopper kubernetes instructions ( #1404 )
...
This makes it clear that when generating a kubernetes secret to pull the bot stopper image that:
- no email is required
- a user is required but the actual value of the username is not checked
- the GH token needs to be pasted in
Signed-off-by: Thomas Arrow <tarrow@users.noreply.github.com >
2026-01-15 11:13:10 +00:00
Xe Iaso
ff87aac4e7
fix(web): include base prefix in generated URLs ( #1403 )
...
* fix(web): include base prefix in generated URLs
Forgot to add the base prefix to these URLs. Committed a fix for this
and added a test to ensure this does not repeat. Oops!
Closes : #1402
Signed-off-by: Xe Iaso <me@xeiaso.net >
* docs: update CHANGELOG
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
2026-01-14 23:47:44 +00:00
Anton Kesy
3c76724aeb
fix: correct typos ( #1398 )
2026-01-12 01:23:58 +00:00
Andrew Young
1db57e5d23
fix sponsor (Databento) logo size ( #1395 )
2026-01-09 23:42:03 +00:00
Xe Iaso
6fc2c3c857
docs: document how to import the default config ( #1392 )
...
Signed-off-by: Xe Iaso <me@xeiaso.net >
2026-01-08 16:14:52 +00:00
dependabot[bot]
149e864786
build(deps): bump preact from 10.28.0 to 10.28.1 in the npm group ( #1387 )
...
Bumps the npm group with 1 update: [preact](https://github.com/preactjs/preact ).
Updates `preact` from 10.28.0 to 10.28.1
- [Release notes](https://github.com/preactjs/preact/releases )
- [Commits](https://github.com/preactjs/preact/compare/10.28.0...10.28.1 )
---
updated-dependencies:
- dependency-name: preact
dependency-version: 10.28.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: npm
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: Jason Cameron <git@jasoncameron.dev >
2026-01-05 21:44:28 -05:00
Jason Cameron
2aaee6c348
Revert "build(deps): bump the gomod group across 1 directory with 3 updates (…" ( #1386 )
2026-01-04 00:13:45 +00:00
dependabot[bot]
ebad69a4e1
build(deps): bump the gomod group across 1 directory with 3 updates ( #1370 )
...
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Jason Cameron <jason.cameron@stanwith.me >
2026-01-03 19:06:05 -05:00
lif
71147b4857
fix: respect Accept-Language quality factors in language detection ( #1380 )
...
The Accept-Language header parsing was not correctly handling quality
factors. When a browser sends "en-GB,de-DE;q=0.5", the expected behavior
is to prefer English (q=1.0 by default) over German (q=0.5).
The fix uses golang.org/x/text/language.ParseAcceptLanguage to properly
parse and sort language preferences by quality factor. It also adds base
language fallbacks (e.g., "en" for "en-GB") to ensure regional variants
match their parent languages when no exact match exists.
Fixes #1022
Signed-off-by: majiayu000 <1835304752@qq.com >
2026-01-02 08:01:43 -05:00
lif
cee7871ef8
fix: update SSL Labs IP addresses ( #1377 )
...
Signed-off-by: majiayu000 <1835304752@qq.com >
Co-authored-by: Jason Cameron <jason.cameron@stanwith.me >
2026-01-01 23:21:31 -05:00
Jason Cameron
26d258fb94
Update check-spelling metadata ( #1379 )
2026-01-01 23:02:15 +00:00
Xe Iaso
80a8e0a8ae
chore: add Databento as diamond tier sponsor
...
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-30 10:56:58 -05:00
Xe Iaso
359613f35a
feat: iplist2rule utility command ( #1373 )
...
* feat: iplist2rule utility command
Assisted-By: GLM 4.7 via Claude Code
Signed-off-by: Xe Iaso <me@xeiaso.net >
* docs: update CHANGELOG
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: fix spelling
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: fix spelling again
Signed-off-by: Xe Iaso <me@xeiaso.net >
* feat(iplist2rule): add comment describing how rule was generated
Signed-off-by: Xe Iaso <me@xeiaso.net >
* docs: add iplist2rule docs
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: fix spelling
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-29 17:10:17 +00:00
Xe Iaso
1d8e98c5ec
test(nginx): fix tests to work in GHA ( #1372 )
...
* test(nginx): fix tests to work in GHA
Closes : #1371
Signed-off-by: Xe Iaso <me@xeiaso.net >
* fix(test): does this work lol
Signed-off-by: Xe Iaso <me@xeiaso.net >
* fix(test): does this other thing work lol
Signed-off-by: Xe Iaso <me@xeiaso.net >
* fix(test): pki folder location
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
Signed-off-by: Jason Cameron <git@jasoncameron.dev >
Co-authored-by: Jason Cameron <git@jasoncameron.dev >
2025-12-28 23:59:48 -05:00
Jason Cameron
880020095c
fix(test): remove interactive flag from nginx smoke test docker run command ( #1371 )
2025-12-29 03:14:50 +00:00
dependabot[bot]
f5728e96a1
build(deps-dev): bump esbuild from 0.27.1 to 0.27.2 in the npm group ( #1368 )
...
Co-authored-by: Jason Cameron <git@jsn.cam >
2025-12-28 22:07:44 -05:00
dependabot[bot]
bcf525dbcf
build(deps): bump the github-actions group with 3 updates ( #1369 )
...
Co-authored-by: Jason Cameron <git@jasoncameron.dev >
2025-12-28 22:04:16 -05:00
Xe Iaso
d748dc9da8
test: basic nginx smoke test ( #1365 )
...
* docs: split nginx configuration files to their own directory
Signed-off-by: Xe Iaso <me@xeiaso.net >
* test: add nginx config smoke test based on the config in the docs
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-28 23:18:25 +00:00
p0008874
9b210d795e
docs(known-instances): Alphabetical order + Add Valve Corporation ( #1352 )
...
Co-authored-by: Jason Cameron <git@jasoncameron.dev >
2025-12-26 01:05:26 +00:00
The Ninth
e084e5011e
feat(localization): add Polish language translation ( #1363 )
...
(cherry picked from commit 1f9c2272e6b.plajzerr@gmail.com >
2025-12-25 15:14:04 -05:00
dependabot[bot]
2532478abd
build(deps): bump the github-actions group with 4 updates ( #1355 )
...
Co-authored-by: Jason Cameron <git@jasoncameron.dev >
2025-12-24 01:02:48 -05:00
Xe Iaso
6d9c0abe74
chore: tag v1.24.0
...
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-23 21:17:59 -05:00
Xe Iaso
a37068a423
fix(default-config): remove browser detection logic ( #1360 )
...
Looks like these rules don't work anymore.
Closes : #1353
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-24 02:13:54 +00:00
Xe Iaso
9d9be61c24
fix(default-config): must-accept-rule on browsers only ( #1350 )
...
TIL docker clients don't include the Accept header all the time. I would
have thought they did that. Oops.
Closes : #1346
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-19 20:42:24 +00:00
Michael
535ed74b17
i18n(de): improve consistency and wording ( #1348 )
...
- Use consistent informal address (fix simplified_explanation)
- Translate "protected_from" ("From" → "Von")
- Standardize "Webseite" → "Website"
- Use more natural phrasing:
- "Berechnung wird durchgeführt" → "Berechnung läuft"
- "Zur Hauptseite" → "Zur Startseite"
- Replace awkward "sozialen Vertrag" phrasing
- "Fingerabdruckerkennung" → "Browser-Fingerprinting" (more common)
- Improve sentence structure and punctuation
Signed-off-by: Michael <87752300+michi-onl@users.noreply.github.com >
2025-12-19 00:29:49 +00:00
Xe Iaso
ba8a1b7caf
fix(honeypot/naive): right, we want the client IP, not the load balancer IP
...
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-16 04:44:59 -05:00
Xe Iaso
40afc13d7f
fix(honeypot/naive): implement better IP parsing logic
...
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-16 04:32:45 -05:00
Xe Iaso
122e4bc072
feat: first implementation of honeypot logic ( #1342 )
...
* feat: first implementation of honeypot logic
This is a bit of an experiment, stick with me.
The core idea here is that badly written crawlers are that: badly
written. They look for anything that contains `<a href="whatever" />`
tags and will blindly use those values to recurse. This takes advantage
of that by hiding a link in a `<script>` tag like this:
```html
<script type="ignore"><a href="/bots-only">Don't click</a></script>
```
Browsers will ignore it because they have no handler for the "ignore"
script type.
This current draft is very unoptimized (it takes like 7 seconds to
generate a page on my tower), however switching spintax libraries will
make this much faster.
The hope is to make this pluggable with WebAssembly such that we force
administrators to choose a storage method. First we crawl before we
walk.
The AI involvement in this commit is limited to the spintax in
affirmations.txt, spintext.txt, and titles.txt. This generates a bunch
of "pseudoprofound bullshit" like the following:
> This Restoration to Balance & Alignment
>
> There's a moment when creators are being called to realize that the work
> can't be reduced to results, but about energy. We don't innovate products
> by pushing harder, we do it by holding the vision. Because momentum can't
> be forced, it unfolds over time when culture are moving in the same
> direction. We're being invited into a paradigm shift in how we think
> about innovation. [...]
This is intended to "look" like normal article text. As this is a first
draft, this sucks and will be improved upon.
Assisted-by: GLM 4.6, ChatGPT, GPT-OSS 120b
Signed-off-by: Xe Iaso <me@xeiaso.net >
* fix(honeypot/naive): optimize hilariously
Signed-off-by: Xe Iaso <me@xeiaso.net >
* feat(honeypot/naive): attempt to automatically filter out based on crawling
Signed-off-by: Xe Iaso <me@xeiaso.net >
* fix(lib): use mazeGen instead of bsGen
Signed-off-by: Xe Iaso <me@xeiaso.net >
* docs: add honeypot docs
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore(test): go mod tidy
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: fix spelling metadata
Signed-off-by: Xe Iaso <me@xeiaso.net >
* chore: spelling
Signed-off-by: Xe Iaso <me@xeiaso.net >
---------
Signed-off-by: Xe Iaso <me@xeiaso.net >
2025-12-16 04:14:29 -05:00
