diff --git a/nix/apps/does-it-build/default.nix b/nix/apps/does-it-build/default.nix
index 785923d..388347e 100644
--- a/nix/apps/does-it-build/default.nix
+++ b/nix/apps/does-it-build/default.nix
@@ -10,6 +10,15 @@ in
     "does-it-build.noratrieb.dev" = {
       logFormat = "";
       extraConfig = ''
+        @blocked {
+          header User-Agent *SemrushBot*
+          header User-Agent *AhrefsBot*
+          header User-Agent *Amazonbot*
+          header User-Agent *openai.com*
+        }
+
+        respond @blocked "get fucked" 418
+
         encode zstd gzip
         reverse_proxy * localhost:3000
       '';
diff --git a/nix/modules/default/default.nix b/nix/modules/default/default.nix
index 316fba2..4138af9 100644
--- a/nix/modules/default/default.nix
+++ b/nix/modules/default/default.nix
@@ -6,6 +6,8 @@ in
 {
   deployment.targetHost = "${name}.infra.noratrieb.dev";
 
+  # TODO: ensure that the rust programs have frame pointers
+
   networking.hosts = {
     "${networkingConfig.vps3.wg.privateIP}" = [ "loki.internal" "pyroscope.internal" "prometheus.internal" ];
   };