[gitea] anubis
change
commit 4dcf3faec8f19f014ce42d3eb40806243faf3dd6
author Alpha Chen <alpha@kejadlen.dev>
date
parent f24fcb08
diff --git a/lotus-land-story/gitea.yml b/lotus-land-story/gitea.yml
index 5f98a3a..8218f81 100644
--- a/lotus-land-story/gitea.yml
+++ b/lotus-land-story/gitea.yml
@@ -6,6 +6,8 @@
     - vars.yml
   vars:
     version: 1.23.7
+    anubis:
+      version: v1.15.2
   tasks:
 
     - name: Create git user
@@ -44,6 +46,22 @@
         owner: "{{ git_user.uid }}"
         group: "{{ git_user.group }}"
 
+    - name: Run Anubis
+      community.docker.docker_container:
+        name: anubis
+        image: ghcr.io/techarohq/anubis:{{ anubis.version }}
+        restart: true
+        env:
+          COOKIE_DOMAIN: kejadlen.dev
+          OG_PASSTHROUGH: "true"
+          SERVE_ROBOTS_TXT: "true"
+          TARGET: http://gitea:3000
+        volumes:
+        ports:
+        restart_policy: unless-stopped
+        networks:
+          - name: lotus_land_story
+
     - name: Run Gitea
       community.docker.docker_container:
         name: gitea
diff --git a/lotus-land-story/templates/Caddyfile b/lotus-land-story/templates/Caddyfile
index 6373839..c897ecd 100644
--- a/lotus-land-story/templates/Caddyfile
+++ b/lotus-land-story/templates/Caddyfile
@@ -122,18 +122,18 @@ docs {
 git.kejadlen.dev {
 	log
 
-	rate_limit {
-		zone rate_limit {
-			match {
-				# not tailscale
-				not client_ip 100.64.0.0/10
-			}
-			key static
-			events 25
-			window 1m
-			log_key
-		}
-	}
+	# rate_limit {
+	# 	zone rate_limit {
+	# 		match {
+	# 			# not tailscale
+	# 			not client_ip 100.64.0.0/10
+	# 		}
+	# 		key static
+	# 		events 50
+	# 		window 1m
+	# 		log_key
+	# 	}
+	# }
 
 	# hacky way to reverse auth only from my laptop
 	@perfect-cherry-blossom client_ip {{ perfect_cherry_blossom_ip }}
@@ -141,7 +141,9 @@ git.kejadlen.dev {
 		header_up X-Webauth-User alpha
 	}
 
-	reverse_proxy gitea:3000
+	reverse_proxy anubis:8923 {
+		header_up X-Real-Ip {remote_host}
+	}
 }
 
 hey.kejadlen.dev