blumeops/docs
Erich Blume 7a42aeb77c
All checks were successful
Deploy Fly.io Proxy / deploy (push) Successful in 1m35s
Mitigate Forgejo archive endpoint DoS from crawler abuse
Crawlers hitting /archive/ endpoints with unique commit SHAs generated 54GB
of git bundles in 2 days, pegging Forgejo at 43% CPU. Fix at multiple layers:

- Redirect archive requests to tailnet at Fly proxy (302)
- Expand robots.txt: block /users/, /*/archive/, /*/releases/download/
- Cache release artifact downloads at nginx (immutable, 7d TTL)
- Enable [cron.archive_cleanup] with 2h TTL and run-at-start

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-04-17 14:21:22 -07:00
..
changelog.d Mitigate Forgejo archive endpoint DoS from crawler abuse 2026-04-17 14:21:22 -07:00
explanation Switch container builds to manual-only workflow dispatch 2026-04-16 14:25:14 -07:00
how-to Switch container builds to manual-only workflow dispatch 2026-04-16 14:25:14 -07:00
reference Document DR rebuild procedure and update restart-indri 2026-04-13 18:07:54 -07:00
tutorials Review adding-a-service tutorial: fix ingress, repoURL, add kustomize and reference card steps 2026-04-08 11:28:46 -07:00
index.md Fix spider trap: disable SPA mode, remove index files, relax wiki-links (#290) 2026-03-09 11:59:43 -07:00
quartz.config.ts Fix spider trap: disable SPA mode, remove index files, relax wiki-links (#290) 2026-03-09 11:59:43 -07:00
quartz.layout.ts Expose Forgejo publicly at forge.eblu.me (#278) 2026-03-03 08:40:41 -08:00