added bot policy to anubis

.gitea/workflows/deploy.yml

@@ -39,7 +39,7 @@ jobs:
       - name: Deploy with rsync
         run: |
           rsync -avz --delete -e "ssh -p ${{ secrets.SERVER_PORT }}" \
-            ./public ./nginx.conf ./docker-compose.prod.yml \
+            ./public ./botPolicy.yaml ./nginx.conf ./docker-compose.prod.yml \
             ${{ secrets.SERVER_USER }}@${{ secrets.SERVER_HOST }}:${{ secrets.DEPLOY_PATH }}
 
       - name: Restart Docker container

botPolicy.yaml

@@ -0,0 +1,17 @@
+bots:
+  - name: cloudflare-workers
+    headers_regex:
+      CF-Worker: .*
+    action: DENY
+  - name: well-known
+    path_regex: ^/.well-known/.*$
+    action: ALLOW
+  - name: favicon
+    path_regex: ^/favicon.ico$
+    action: ALLOW
+  - name: robots-txt
+    path_regex: ^/robots.txt$
+    action: ALLOW
+  - name: generic-browser
+    user_agent_regex: Mozilla
+    action: CHALLENGE