forked from the-distro/infra
33 lines
883 B
Nix
33 lines
883 B
Nix
|
{ pkgs, config, lib, ... }:
|
||
|
|
let
|
||
|
|
inherit (lib) mkEnableOption mkIf mkOption types concatStringsSep mkDefault splitString;
|
||
|
|
cfg = config.bagel.services.nginx.crawler-blocker;
|
||
|
|
mkRobotsFile = blockedUAs: pkgs.writeText "robots.txt" ''
|
||
|
|
${concatStringsSep "\n" (map (ua: "User-agent: ${ua}") blockedUAs)}
|
||
|
|
Disallow: /
|
||
|
|
'';
|
||
|
|
in
|
||
|
|
{
|
||
|
|
options = {
|
||
|
|
bagel.services.nginx.crawler-blocker = {
|
||
|
|
enable = mkEnableOption "the crawler blocker";
|
||
|
|
|
||
|
|
userAgents = mkOption {
|
||
|
|
type = types.listOf types.str;
|
||
|
|
default = splitString "\n" (builtins.readFile ./blocked-ua.txt);
|
||
|
|
};
|
||
|
|
};
|
||
|
|
|
||
|
|
services.nginx.virtualHosts = mkOption {
|
||
|
|
type = types.attrsOf (types.submodule {
|
||
|
|
config = {
|
||
|
|
locations."= /robots.txt" = mkIf cfg.enable (mkDefault {
|
||
|
|
alias = mkRobotsFile cfg.userAgents;
|
||
|
|
});
|
||
|
|
};
|
||
|
|
});
|
||
|
|
};
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|