diff --git a/lotus-land-story/gitea.yml b/lotus-land-story/gitea.yml
index 5f98a3a..8218f81 100644
--- a/lotus-land-story/gitea.yml
+++ b/lotus-land-story/gitea.yml
@@ -6,6 +6,8 @@
- vars.yml
vars:
version: 1.23.7
+ anubis:
+ version: v1.15.2
tasks:
- name: Create git user
@@ -44,6 +46,22 @@
owner: "{{ git_user.uid }}"
group: "{{ git_user.group }}"
+ - name: Run Anubis
+ community.docker.docker_container:
+ name: anubis
+ image: ghcr.io/techarohq/anubis:{{ anubis.version }}
+ restart: true
+ env:
+ COOKIE_DOMAIN: kejadlen.dev
+ OG_PASSTHROUGH: "true"
+ SERVE_ROBOTS_TXT: "true"
+ TARGET: http://gitea:3000
+ volumes:
+ ports:
+ restart_policy: unless-stopped
+ networks:
+ - name: lotus_land_story
+
- name: Run Gitea
community.docker.docker_container:
name: gitea
diff --git a/lotus-land-story/templates/Caddyfile b/lotus-land-story/templates/Caddyfile
index 6373839..c897ecd 100644
--- a/lotus-land-story/templates/Caddyfile
+++ b/lotus-land-story/templates/Caddyfile
@@ -122,18 +122,18 @@ docs {
git.kejadlen.dev {
log
- rate_limit {
- zone rate_limit {
- match {
- # not tailscale
- not client_ip 100.64.0.0/10
- }
- key static
- events 25
- window 1m
- log_key
- }
- }
+ # rate_limit {
+ # zone rate_limit {
+ # match {
+ # # not tailscale
+ # not client_ip 100.64.0.0/10
+ # }
+ # key static
+ # events 50
+ # window 1m
+ # log_key
+ # }
+ # }
# hacky way to reverse auth only from my laptop
@perfect-cherry-blossom client_ip {{ perfect_cherry_blossom_ip }}
@@ -141,7 +141,9 @@ git.kejadlen.dev {
header_up X-Webauth-User alpha
}
- reverse_proxy gitea:3000
+ reverse_proxy anubis:8923 {
+ header_up X-Real-Ip {remote_host}
+ }
}
hey.kejadlen.dev