| 26 Jul 2025 |
hexa | https://github.com/NixOS/infra/blob/main/build/hydra-proxy.nix#L14 | 01:46:51 |
hexa | we currently have a map for some exceptions, but you likely don't need that | 01:47:12 |
hexa | just bypass the map and point the proxyPass directly at anubis | 01:47:23 |
Sandro 🐧 | I do proxy auth but that's more complicated | 11:46:58 |
Sandro 🐧 | And I also patch anubis to not lie about the http status code | 11:47:11 |
hexa | yeah, I looked into that (realistic status codes) shortly and you have to configure the whole bot policy yourself if you want to override these | 13:29:33 |
hexa | so patching them in the source is more appealing | 13:29:39 |
hexa | same with go-away, which has various yaml policy definitions | 13:30:00 |
hexa | I absolutely don't want to manage my own policy list, if I can get away with it | 13:30:15 |
cleverca22 | i was also thinking auth proxy would perform better, and then realized there are similar issues at work with other software, where i can apply the same fix | 16:04:16 |
Sandro 🐧 | I want to write some to skip it if the user is logged in | 20:05:02 |