aboutsummaryrefslogtreecommitdiff
path: root/cmd/anubis/main.go
AgeCommit message (Collapse)AuthorFilesLines
2025-04-26feat(anubis): replace with tombstoneXe Iaso1-569/+0
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-03-17cmd/anubis: add rule hashes for admin-configured denials (#696)Xe Iaso1-2/+29
* cmd/anubis: add rule hashes for admin-configured denials Closes #695 Signed-off-by: Xe Iaso <me@xeiaso.net> * cmd/anubis: remove theoretical nil pointer deference panic This won't actually happen in real life, but the code paths might change so we should be somewhat defensive. Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com> --------- Signed-off-by: Xe Iaso <me@xeiaso.net> Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>
2025-03-03cmd/anubis: implement health check (#685)Xe Iaso1-0/+22
Closes #681 Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-14cmd/anubis: cache DNSBL hits in a DecayMapXe Iaso1-12/+27
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-02-14cmd/anubis: enable DNSBL checking via droneblXe Iaso1-0/+14
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-26cmd/anubis: forbid bypassing auth by faking the challenge difficultyXe Iaso1-18/+2
This fixes a trivial auth bypass where a user requests a challenge, formulates any nonce they want (such as 42069), and then passes the challenge with difficulty zero. This was fixed by not using the difficulity the client specified and instead using the fixed difficulty at the server level. The difficulty has also been encoded into the challenge in 7bd7b209f4f1. Thanks to Coral Pink for finding this and reporting it over email. Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-26cmd/anubis: bake difficulty into challengeXe Iaso1-1/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-26cmd/anubis: ship sourcemapsXe Iaso1-1/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-25cmd/anubis: prepare for more efficient servingXe Iaso1-1/+32
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-25cmd/anubis: minify JS, add video element testXe Iaso1-5/+7
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24cmd/anubis: add rudimentary bot policy supportXe Iaso1-49/+93
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-24cmd/anubis: don't include Accept-Encoding in challengeXe Iaso1-2/+1
Browsers are known to change the Accept-Encoding header based on what media type is being accepted. I kinda hate this too, but such is life. Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19Earthfile: embed the version in CIXe Iaso1-1/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: expose internal API calls on the metrics serverXe Iaso1-3/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/build: fix other merge conflicts that I accidentally incurred by coding ↵Xe Iaso1-5/+0
while waking up Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: oops, i hate git mergesXe Iaso1-3/+0
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: inject fingerprint of the private key of the Anubis serverXe Iaso1-5/+16
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: fix expiry checking logicXe Iaso1-13/+30
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: idk what's wrong but something isXe Iaso1-7/+7
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: clear the cookie more robustlyXe Iaso1-0/+7
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: fix logic?Xe Iaso1-1/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-19cmd/anubis: immortally cache the anubis assetsXe Iaso1-1/+1
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-18cmd/anubis: embed diagrams in READMEXe Iaso1-5/+8
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-18cmd/anubis: add time to the hashXe Iaso1-1/+2
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-18cmd/anubis: compare the leading zeroesXe Iaso1-0/+22
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-18cmd/anubis: serveral improvementsXe Iaso1-1/+5
* Make sha256 function less bad (thanks @allypost!) * Link to git.xeserv.us in README * actually start metrics server in the background
2025-01-18cmd/anubis: improve metricsXe Iaso1-2/+20
Signed-off-by: Xe Iaso <me@xeiaso.net>
2025-01-18cmd: add AnubisXe Iaso1-0/+354
Signed-off-by: Xe Iaso <me@xeiaso.net>