Erich Blume 7a42aeb77c Mitigate Forgejo archive endpoint DoS from crawler abuse ... Crawlers hitting /archive/ endpoints with unique commit SHAs generated 54GB of git bundles in 2 days, pegging Forgejo at 43% CPU. Fix at multiple layers: - Redirect archive requests to tailnet at Fly proxy (302) - Expand robots.txt: block /users/, /*/archive/, /*/releases/download/ - Cache release artifact downloads at nginx (immutable, 7d TTL) - Enable [cron.archive_cleanup] with 2h TTL and run-at-start Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>		2026-04-17 14:21:22 -07:00
..
+borgmatic-launchagent-tcc.bugfix.md	Fix borgmatic LaunchAgent TCC dialog hang by removing mise wrapper	2026-04-15 07:23:46 -07:00
+container-manual-builds.infra.md	Switch container builds to manual-only workflow dispatch	2026-04-16 14:25:14 -07:00
+dagger-go-build-refactor.infra.md	Refactor Dagger go_build() helper and standardize Alpine 3.23	2026-04-16 10:10:46 -07:00
+forge-robots-txt.infra.md	Add changelog fragment for forge robots.txt	2026-04-16 15:40:34 -07:00
+forgejo-archive-dos-mitigation.infra.md	Mitigate Forgejo archive endpoint DoS from crawler abuse	2026-04-17 14:21:22 -07:00
+kiwix-dagger-migration.infra.md	Migrate kiwix-serve container from Dockerfile to native Dagger build	2026-04-17 13:56:32 -07:00
+review-sso-gated-admin-tools.misc.md	Review CC sso-gated-admin-tools: scope to ArgoCD only	2026-04-14 13:07:52 -07:00
.gitkeep	Add towncrier changelog system (#86)	2026-02-03 11:48:13 -08:00
automate-manual-prowler-checks.infra.md	Automate Prowler MANUAL finding verification (#335)	2026-04-14 13:00:44 -07:00
dagger-transmission-containers.infra.md	Migrate transmission containers from Dockerfile to Dagger builds	2026-04-15 11:26:00 -07:00
upgrade-prowler-5.23.infra.md	Upgrade Prowler to 5.23.0, remove registry workaround (#336)	2026-04-14 13:45:28 -07:00