feat(nginx): allow blocking certain user-agents on production

wmde · Oct 30, 2023 · 5b79002 · 5b79002
1 parent 5bf9dc6
commit 5b79002
Showing 1 changed file with 9 additions and 0 deletions.
diff --git a/k8s/helmfile/env/production/platform-nginx.nginx.conf b/k8s/helmfile/env/production/platform-nginx.nginx.conf
@@ -18,6 +18,11 @@ map $request_uri $mwgroup {
         default "web";
 }
 
+map $http_user_agent $blocked_agent {
+        ~Bytespider 1;
+        default 0;
+}
+
 server {
         listen 8080;
         server_name _; # This is just an invalid value which will never trigger on a real hostname.
@@ -65,6 +70,10 @@ server {
 
         proxy_max_temp_file_size                1024m;
 
+        if ($blocked_agent) {
+                return 444;
+        }
+
         # Allowoverriding the group decision using the magic header
         if ($http_x_wbstack_alpha) {
                 set $mwgroup "alpha";