bombai: bomba ai

instead of letting the ai boom bomb our websites, lets bomb the ai in return.

features

• not dependent on user agents
  • metric is only what is requested
• configurable, allowing e.g. setting lower limits for rarely visited pages
• specifically designed to guard forgejo (and similar) things
• zip bombs
• traps (like iocaine but muuuch simpler)
• redirecting to iocaine :)
• infinitely loading pages (that send infinite data)

config

defalt config is automatically dropped to disk and can also be found at src/bombai.toml

it contains a lot of documentation

how to

add to caddyfile as per the caddyfile in this repo. the iocaine part is not required.

@read method GET HEAD
reverse_proxy @read 127.0.0.1:42067 {
	@fallback status 421
	handle_response @fallback

	# optional, if using fail_response.data = http
	@iocaine status 423
	handle_response @iocaine {
		reverse_proxy 127.0.0.1:42069 # iocaine needs to be configured to always serve its poison for this.
	}
}

license

wtfpl+-ai. no ai allowed, everything else allowed.