Compare commits

..

11 Commits

Author SHA1 Message Date
Xe Iaso
09b6cfc324 fix(challenge/preact): fix build in ci
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:58:10 +00:00
Xe Iaso
f5c8614c61 fix(test/healthcheck): run asset build
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:40:48 +00:00
Xe Iaso
1bba942e0e fix(challenges/xeact): use %s here, not %w
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:39:30 +00:00
Xe Iaso
f89322f2df fix(challenges/xeact): make a UI render without JS
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:34:12 +00:00
Xe Iaso
b794fe00f3 Merge branch 'main' into Xe/proof-of-react
Signed-off-by: Xe Iaso <xe.iaso@techaro.lol>
2025-08-29 15:32:52 -04:00
Xe Iaso
2c0382995f fix(challenges/xeact): add default loading message
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:23:06 +00:00
Xe Iaso
ee662f2b56 fix(challenges/xeact): add noscript warning
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:22:34 +00:00
Xe Iaso
7905a1c6b6 docs: fix spelling
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:13:47 +00:00
Xe Iaso
f2a60fedcc fix(challenge/preact): ensure that the client waits as long as it needs to
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:12:38 +00:00
Xe Iaso
9557442294 fix(challenge/preact): use JSX fragments
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-29 19:05:36 +00:00
Xe Iaso
e7755a352e feat: add 'proof of React' challenge
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-08-25 23:55:29 +00:00
18 changed files with 110 additions and 343 deletions

View File

@@ -1,25 +0,0 @@
.env
*.deb
*.rpm
# Additional package locks
pnpm-lock.yaml
yarn.lock
# Go binaries and test artifacts
main
*.test
node_modules
# MacOS
.DS_store
# Intellij
.idea
# how does this get here
doc/VERSION
web/static/js/*
!web/static/js/.gitignore

View File

@@ -1,38 +0,0 @@
---
name: Bug report
about: Create a report to help us improve
title: 'bug:'
labels: ''
assignees: ''
---
**Describe the bug**
A clear and concise description of what the bug is.
**To Reproduce**
Steps to reproduce the behavior:
1. Go to '...'
2. Click on '....'
3. Scroll down to '....'
4. See error
**Expected behavior**
A clear and concise description of what you expected to happen.
**Screenshots**
If applicable, add screenshots to help explain your problem.
**Desktop (please complete the following information):**
- OS: [e.g. iOS]
- Browser [e.g. chrome, safari]
- Version [e.g. 22]
**Smartphone (please complete the following information):**
- Device: [e.g. iPhone6]
- OS: [e.g. iOS8.1]
- Browser [e.g. stock browser, safari]
- Version [e.g. 22]
**Additional context**
Add any other context about the problem here.

View File

@@ -1,20 +0,0 @@
---
name: Feature request
about: Suggest an idea for this project
title: 'feature:'
labels: ''
assignees: ''
---
**Is your feature request related to a problem? Please describe.**
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]
**Describe the solution you'd like**
A clear and concise description of what you want to happen.
**Describe alternatives you've considered**
A clear and concise description of any alternative solutions or features you've considered.
**Additional context**
Add any other context or screenshots about the feature request here.

View File

@@ -1,9 +0,0 @@
---
name: Security report
about: Do not file security reports here. Email security@techaro.lol.
title: "security:"
labels: ""
assignees: Xe
---
Do not file security reports here. Email security@techaro.lol.

View File

@@ -6,7 +6,6 @@ amazonbot
anthro
anubis
anubistest
apk
Applebot
archlinux
asnc
@@ -114,7 +113,6 @@ fsys
fullchain
gaissmai
Galvus
gcflags
geoip
geoipchecker
gha
@@ -217,7 +215,6 @@ NONINFRINGEMENT
nosleep
OCOB
ogtag
oklch
omgili
omgilibot
openai
@@ -270,8 +267,6 @@ runtimedirectory
Ryzen
sas
sasl
sbom
screenshots
searchbot
searx
sebest
@@ -344,7 +339,6 @@ withthothmock
wolfbeast
wordpress
Workaround
workaround
workdir
wpbot
XCircle

View File

@@ -2,7 +2,7 @@ name: Docker image builds (pull requests)
on:
pull_request:
branches: ["main"]
branches: [ "main" ]
env:
DOCKER_METADATA_SET_OUTPUT_ENV: "true"
@@ -11,7 +11,7 @@ permissions:
contents: read
jobs:
buildx-bake:
build:
runs-on: ubuntu-24.04
steps:
- name: Checkout code
@@ -21,17 +21,48 @@ jobs:
fetch-depth: 0
persist-credentials: false
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
- name: Set up Homebrew
uses: Homebrew/actions/setup-homebrew@main
- name: Setup Homebrew cellar cache
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: |
/home/linuxbrew/.linuxbrew/Cellar
/home/linuxbrew/.linuxbrew/bin
/home/linuxbrew/.linuxbrew/etc
/home/linuxbrew/.linuxbrew/include
/home/linuxbrew/.linuxbrew/lib
/home/linuxbrew/.linuxbrew/opt
/home/linuxbrew/.linuxbrew/sbin
/home/linuxbrew/.linuxbrew/share
/home/linuxbrew/.linuxbrew/var
key: ${{ runner.os }}-go-homebrew-cellar-${{ hashFiles('go.sum') }}
restore-keys: |
${{ runner.os }}-go-homebrew-cellar-
- name: Install Brew dependencies
run: |
brew bundle
- name: Docker meta
id: meta
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
with:
images: ghcr.io/${{ github.repository }}
- name: Build and push
id: build
uses: docker/bake-action@76f9fa3a758507623da19f6092dc4089a7e61592 # v6.6.0
with:
source: .
push: true
sbom: true
cache-from: type=gha
cache-to: type=gha,mode=max
set: |
anubis.tags=ttl.sh/techaro/pr-${{ github.event.number }}/anubis:24h
run: |
npm ci
npm run container
env:
PULL_REQUEST_ID: ${{ github.event.number }}
DOCKER_REPO: ghcr.io/${{ github.repository }}
SLOG_LEVEL: debug
- run: |
echo "Test this with:"
echo "docker pull ${DOCKER_IMAGE}"
env:
DOCKER_IMAGE: ${{ steps.build.outputs.docker_image }}

View File

@@ -17,7 +17,7 @@ permissions:
pull-requests: write
jobs:
buildx-bake:
build:
runs-on: ubuntu-24.04
steps:
- name: Checkout code
@@ -27,8 +27,33 @@ jobs:
fetch-depth: 0
persist-credentials: false
- name: Set up Docker Buildx
uses: docker/setup-buildx-action@b5ca514318bd6ebac0fb2aedd5d36ec1b5c232a2 # v3.10.0
- name: Set lowercase image name
run: |
echo "IMAGE=ghcr.io/${GITHUB_REPOSITORY,,}" >> $GITHUB_ENV
- name: Set up Homebrew
uses: Homebrew/actions/setup-homebrew@main
- name: Setup Homebrew cellar cache
uses: actions/cache@5a3ec84eff668545956fd18022155c47e93e2684 # v4.2.3
with:
path: |
/home/linuxbrew/.linuxbrew/Cellar
/home/linuxbrew/.linuxbrew/bin
/home/linuxbrew/.linuxbrew/etc
/home/linuxbrew/.linuxbrew/include
/home/linuxbrew/.linuxbrew/lib
/home/linuxbrew/.linuxbrew/opt
/home/linuxbrew/.linuxbrew/sbin
/home/linuxbrew/.linuxbrew/share
/home/linuxbrew/.linuxbrew/var
key: ${{ runner.os }}-go-homebrew-cellar-${{ hashFiles('go.sum') }}
restore-keys: |
${{ runner.os }}-go-homebrew-cellar-
- name: Install Brew dependencies
run: |
brew bundle
- name: Log into registry
uses: docker/login-action@74a5d142397b4f367a81961eba4e8cd7edddf772 # v3.4.0
@@ -37,16 +62,24 @@ jobs:
username: ${{ github.repository_owner }}
password: ${{ secrets.GITHUB_TOKEN }}
- name: Set version
run: |
echo "VERSION=$(git describe --tags --always --dirty) >> $GITHUB_ENV
- name: Docker meta
id: meta
uses: docker/metadata-action@902fa8ec7d6ecbf8d84d538b9b233a880e428804 # v5.7.0
with:
images: ${{ env.IMAGE }}
- name: Build and push
id: build
uses: docker/bake-action@76f9fa3a758507623da19f6092dc4089a7e61592 # v6.6.0
run: |
npm ci
npm run container
env:
DOCKER_REPO: ${{ env.IMAGE }}
SLOG_LEVEL: debug
- name: Generate artifact attestation
uses: actions/attest-build-provenance@e8998f949152b193b063cb0ec769d69d929409be # v2.4.0
with:
source: .
push: true
sbom: true
cache-from: type=gha
cache-to: type=gha,mode=max
subject-name: ${{ env.IMAGE }}
subject-digest: ${{ steps.build.outputs.digest }}
push-to-registry: true

View File

@@ -1,33 +0,0 @@
variable "ALPINE_VERSION" { default = "3.22" }
variable "GITHUB_SHA" { default = "devel" }
variable "VERSION" { default = "devel-docker" }
group "default" {
targets = [
"anubis",
]
}
target "anubis" {
args = {
ALPINE_VERSION = "3.22"
VERSION = "${VERSION}"
}
context = "."
dockerfile = "./docker/anubis.Dockerfile"
platforms = [
"linux/386",
"linux/amd64",
"linux/arm64",
"linux/arm/v7",
"linux/ppc64le",
"linux/riscv64",
]
pull = true
sbom = true
provenance = true
tags = [
"ghcr.io/techarohq/anubis:${VERSION}",
"ghcr.io/techarohq/anubis:main"
]
}

View File

@@ -1,54 +0,0 @@
ARG ALPINE_VERSION=edge
FROM --platform=${BUILDPLATFORM} alpine:${ALPINE_VERSION} AS build
RUN apk -U add go nodejs git build-base git npm bash zstd brotli gzip
WORKDIR /app
COPY go.mod go.sum ./
RUN \
--mount=type=cache,target=/root/.cache \
--mount=type=cache,target=/root/go \
go mod download
COPY package.json package-lock.json ./
RUN \
--mount=type=cache,target=/app/node_modules \
npm ci
COPY . .
RUN \
--mount=type=cache,target=/root/.cache \
--mount=type=cache,target=/root/go \
--mount=type=cache,target=/app/node_modules \
npm run assets
ARG TARGETOS
ARG TARGETARCH
ARG VERSION=devel-docker
RUN \
--mount=type=cache,target=/root/.cache \
--mount=type=cache,target=/root/go \
--mount=type=cache,target=/app/node_modules \
GOOS=${TARGETOS} \
GOARCH=${TARGETARCH} \
CGO_ENABLED=0 \
GOARM=7 \
go build \
-gcflags "all=-N -l" \
-o /app/bin/anubis \
-ldflags "-s -w -extldflags -static -X github.com/TecharoHQ/anubis.Version=${VERSION}" \
./cmd/anubis
FROM alpine:${ALPINE_VERSION} AS run
WORKDIR /app
RUN apk -U add ca-certificates mailcap
COPY --from=build /app/bin/anubis /app/bin/anubis
CMD ["/app/bin/anubis"]
HEALTHCHECK --interval=30s --timeout=30s --start-period=5s --retries=3 CMD [ "/app/bin/anubis", "--healthcheck" ]
LABEL org.opencontainers.image.source="https://github.com/TecharoHQ/anubis"

View File

@@ -315,52 +315,3 @@
gap: 1rem;
}
}
@media (prefers-color-scheme: light) {
.block {
background-color: oklch(93% 0.034 272.788);
}
.challengeText {
color: oklch(12.9% 0.042 264.695);
}
.combinedDataText {
color: oklch(12.9% 0.042 264.695);
}
.nonceButton {
background-color: oklch(88.2% 0.059 254.128);
}
.nonceValue {
color: oklch(12.9% 0.042 264.695);
}
.blockTitle {
color: oklch(45% 0.085 224.283);
}
.hashContainerSuccess {
background-color: oklch(95% 0.052 163.051);
border-color: rgb(74 222 128);
}
.hashContainerError {
background-color: oklch(94.1% 0.03 12.58);
border-color: rgb(248 113 113);
}
.hashPrefixGreen {
color: oklch(53.2% 0.157 131.589);
font-weight: 600;
}
.hashPrefixRed {
color: oklch(45.5% 0.188 13.697);
}
.hashSuffix {
color: oklch(27.9% 0.041 260.031);
}
}

View File

@@ -7,7 +7,7 @@ sidebar_position: 999
All notable changes to this project will be documented in this file.
The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).https://bsky.app/profile/xeiaso.net/post/3lxkqbd25hk22
## [Unreleased]
@@ -68,18 +68,8 @@ Thanks to [@taviso](https://github.com/taviso) for reporting this issue.
### Breaking changes
We try to introduce breaking changes as much as possible, but these are the changes that may be relevant for you as an administrator:
- The "slow" frontend solver has been removed in order to reduce maintenance burden. Any existing uses of it will still work, but issue a warning upon startup asking administrators to upgrade to the "fast" frontend solver.
#### Docker image build process has been changed
Previously Docker images were built with [ko](https://ko.build/), which put the Anubis binary at `/ko-app/anubis`. [#862](https://github.com/TecharoHQ/anubis/pull/862) changes this to build with [docker buildx bake](https://docs.docker.com/reference/cli/docker/buildx/bake/) instead. If this causes you problems, please [file an issue](https://github.com/TecharoHQ/anubis/issues/new).
### New Locales
- [Lithuanian](https://github.com/TecharoHQ/anubis/pull/972)
## v1.21.3: Minfilia Warde - Echo 3
### Added

View File

@@ -1,65 +0,0 @@
{
"loading": "Įkeliama...",
"why_am_i_seeing": "Kodėl tai matau?",
"protected_by": "Saugo",
"protected_from": "iš",
"made_with": "Sukurta 🇨🇦 su ❤️",
"mascot_design": "Talismao dizainą sukūrė",
"ai_companies_explanation": "Šią užsklandą matote, nes šią svetainę administruojantis asmuo įdiegė ir sukonfigūravo „Anubis“, siekdamas apsaugoti svetainę nuo DI kompanijų robotų, agresyviai siurbiančių visą svetainių turinį. Neretai toks elgesys sukelia svetainių veikimo trikdžius, todėl jos tampa nepasiekiamos niekam.",
"anubis_compromise": "„Anubis“ tai kompromisas. „Anubis“ naudoja „darbo įrodymo“ (angl. „Proof-of-Work“) metodą, panašų į „Hashcash“ anksčiau siūlytą „darbo įrodymo“ principu pagrįstą apsaugą el. paštui. Šio sumanymo pagrindinė idėja paprasta: paprastiems lankytojams toks papildomas krūvis yra nežymus, tuo tarpu masiškai duomenis siurbiantiems robotams jis greitai pasijunta ir stipriai pabrangina siurbimą.",
"hack_purpose": "Vis dėlto, šis metodas laikytinas tik laikinu tarpiniu sprendimu, suteikiančiu galimybę skirti daugiau laiko atrasti robotizuotų naršyklių ypatybėms (pavyzdžiui, šriftų atvaizdavimo savitumams), siekiant iššūkio „darbo įrodymu“ tinklalapį tiems naudotojams, kurie atrodo tikri, rodyti kuo rečiau.",
"simplified_explanation": "Tai priemonė prieš robotus ir piktybines užklausas, panaši į „CAPTCHA“. Tačiau šiuo atveju užduotį turite atlikti ne jūs, o jūsų naršyklė, kuriai išspręsti pateikiama matematinė užduotis. Šis metodas vadinamas „darbo įrodymu“ (angl. <a href=\"https://en.wikipedia.org/wiki/Proof_of_work\">„Proof-of-work“</a>). Naršyklė atsakymą paprastai apskaičiuoja per kelias sekundes, o tuomet jums suteikiama prieiga prie svetainės. Dėkojame jums už supratingumą ir kantrybę.",
"jshelter_note": "Turėkite omenyje, jog „Anubis“ reikalauja šiuolaikinių „JavaScript“ funkcijų, kurias tam tikri naršyklių įskiepiai, pavyzdžiui, „JShelter“, gali atjungti. Norint naršyti šią svetainę, teks joje „JShelter“ ar kitus analogiškus įskiepius atjungti.",
"version_info": "Šioje svetainėje veikia „Anubis“ versija",
"try_again": "Bandyti dar kartą",
"go_home": "Grįžkite į pradžią",
"contact_webmaster": "arba, jei manote, jog esate blokuojami per klaidą, kreipkitės į svetainės administratorių adresu",
"connection_security": "Prašom luktelėti, kol patikrinsime jūsų ryšio saugumą.",
"javascript_required": "Deja, kad galėtumėte praeiti pro šią užsklandą, naršyklėje turėsite įjungti „JavaScript“. Tai reikalinga, nes DI produktus kuriančios įmonės visiškai nepaiso saityne nusistovėjusios naudojimosi svetainėmis tvarkos (etiketo). Sprendimas, kuriam nebūtinas įjungtas „JavaScript“, šiuo metu kuriamas.",
"benchmark_requires_js": "Įvertinimo įrankiui būtina, kad naršyklėje būtų įjungtas „JavaScript“ palaikymas.",
"difficulty": "Sudėtingumas:",
"algorithm": "Algoritmas:",
"compare": "Palyginti:",
"time": "Laikas",
"iters": "Iteracijos",
"time_a": "Laikas A",
"iters_a": "Iteracijos A",
"time_b": "Laikas B",
"iters_b": "Iteracijos B",
"static_check_endpoint": "Tai tik būsenos patikrinimo adresas, kurį gali naudoti jūsų atvirkštinis įgaliotasis serveris.",
"authorization_required": "Būtinas leidimas",
"cookies_disabled": "Jūsų naršyklė sukonfigūruota nepriimti slapukų. „Anubis“ veikimui siekiant užtikrinti, jog jūs esate tikras asmuo, būtini funkciniai (teisėto intereso) slapukai. Prašom leisti slapukus šioje svetainėje",
"access_denied": "Prieiga uždrausta: klaidos kodas",
"dronebl_entry": "„DroneBL“ pranešė apie įrašą",
"see_dronebl_lookup": "parodyti",
"internal_server_error": "Saityno serverio klaida: administratorius netinkamai sukonfigūravo „Anubis“ užsklandą. Susisiekite su svetainės administratoriumi ir paprašykite, kad paskaitytų žurnalų įrašus",
"invalid_redirect": "Netinkamas nukreipimas",
"redirect_not_parseable": "Nukreipimo adreso nepavyko išanalizuoti",
"redirect_domain_not_allowed": "Nukreipimo domenas neleistinas",
"failed_to_sign_jwt": "nepavyko pasirašyti JWT",
"invalid_invocation": "Netinkamas kreipinys į „MakeChallenge“",
"client_error_browser": "Kliento klaida: įsitikinkite, jog jūsų naršyklė pakankamai atšviežinta ir bandykite dar kartą.",
"oh_noes": "O, ne!",
"benchmarking_anubis": "„Anubis“ vertina!",
"you_are_not_a_bot": "Jūs nesate robotas!",
"making_sure_not_bot": "Stengiamasi užtikrinti, jog jūs nesate robotas!",
"celphase": "CELPHASE",
"js_web_crypto_error": "Jūsų naršyklėje nėra funkcionalaus „web.crypto“ elemento. Ar jūs šį tinklalapį žiūrite iš saugaus konteksto?",
"js_web_workers_error": "Jūsų naršyklė nepalaiko aptarnavimo scenarijų, kuriuos „Anubis“ naudoja išvengti naršyklės strigčių. Gal turite įdiegtą „JShelter“ ar panašų įskiepį?",
"js_cookies_error": "Jūsų naršyklė nepriima slapukų. „Anubis“ iššūkį jau praėjusius lankytojus atskiria pagal prieigos raktą, kurį įrašo slapuke. Prašom įjungti slapukus šiai svetainei. „Anubis“ slapuko pavadinimas gali kisti be įspėjimo. Slapuko pavadinimas ir reikšmė nėra viešosios programavimo sąsajos dalis.",
"js_context_not_secure": "Jūsų kontekstas nėra saugus!",
"js_context_not_secure_msg": "Pabandykite prisijungti per HTTPS arba praneškite svetainės administratoriui, kad sukonfigūruotų HTTPS. Išsamesnės informacijos rasite <a href=\"https://developer.mozilla.org/en-US/docs/Web/Security/Secure_Contexts#when_is_a_context_considered_secure\">MDN</a> (anglų k.).",
"js_calculating": "Skaičiuojama...",
"js_missing_feature": "Trūksta funkcionalumo",
"js_challenge_error": "Iššūkio klaida!",
"js_challenge_error_msg": "Nepavyko nustatyti patikros algoritmo. Pamėginkite įkelti tinklalapį iš naujo.",
"js_calculating_difficulty": "Skaičiuojama...<br/>Sudėtingumas:",
"js_speed": "Sparta:",
"js_verification_longer": "Patikra užtrunka ilgiau nei įprasta. Neskubėkite įkelti šio tinklalapio iš naujo.",
"js_success": "Sėkmė!",
"js_done_took": "Baigta! Prireikė",
"js_iterations": "iteracijų",
"js_finished_reading": "Viską perskaičiau, tęskime →",
"js_calculation_error": "Skaičiavimo klaida!",
"js_calculation_error_msg": "Nepavyko įveikti iššūkio:"
}

View File

@@ -11,7 +11,6 @@
"is",
"it",
"ja",
"lt",
"nb",
"nl",
"nn",

View File

@@ -10,7 +10,7 @@ services:
- ./var/repos:/srv/git
anubis:
image: ghcr.io/techarohq/anubis:devel-docker
image: ko.local/anubis
environment:
BIND: ":8005"
TARGET: http://cgit:80

View File

@@ -9,7 +9,9 @@ set -u
(
cd ../.. && \
docker buildx bake
npm ci && \
npm run assets \
ko build --platform=all --base-import-paths --tags="latest" --image-user=1000 --image-annotation="" --image-label="" ./cmd/anubis -L
)
rm -rf ./var/repos ./var/clones

View File

@@ -9,10 +9,11 @@ set -u
(
cd ../.. && \
docker buildx bake
npm ci && \
npm run assets \
ko build --platform=all --base-import-paths --tags="latest" --image-user=1000 --image-annotation="" --image-label="" ./cmd/anubis -L
)
rm -rf ./var/repos ./var/foo
mkdir -p ./var/repos

View File

@@ -9,10 +9,11 @@ set -u
(
cd ../.. && \
docker buildx bake
npm ci && \
npm run assets \
ko build --platform=all --base-import-paths --tags="latest" --image-user=1000 --image-annotation="" --image-label="" ./cmd/anubis -L
)
docker compose up -d
attempt=1

View File

@@ -17,7 +17,16 @@ function build_anubis_ko() {
cd $REPO_ROOT && npm ci && npm run assets
)
(
cd $REPO_ROOT && docker buildx bake
cd $REPO_ROOT &&
VERSION=devel ko build \
--platform=all \
--base-import-paths \
--tags="latest" \
--image-user=1000 \
--image-annotation="" \
--image-label="" \
./cmd/anubis \
--local
)
}