yeah

nix/apps/does-it-build/default.nix

@@ -10,6 +10,15 @@ in
     "does-it-build.noratrieb.dev" = {
       logFormat = "";
       extraConfig = ''
+        @blocked {
+          header User-Agent *SemrushBot*
+          header User-Agent *AhrefsBot*
+          header User-Agent *Amazonbot*
+          header User-Agent *openai.com*
+        }
+
+        respond @blocked "get fucked" 418
+
         encode zstd gzip
         reverse_proxy * localhost:3000
       '';

nix/modules/caddy/default.nix

@@ -3,9 +3,9 @@
 let
   caddy = pkgs.caddy.withPlugins {
     plugins = [
-      "github.com/noratrieb-mirrors/certmagic-s3@v1.0.0"
+      "github.com/noratrieb-mirrors/certmagic-s3@v1.1.3"
     ];
-    hash = "sha256-O1SK13hacEkuSpWLhSdq+hu18Bi6+DqYUPu0lzBpvIE=";
+    hash = "sha256-HdCXbqrrGPZSdHv7bZvGz9T6loVbrfKydTbjTyt5Wt0=";
   };
 in
 {

nix/modules/default/default.nix

@@ -6,6 +6,8 @@ in
 {
   deployment.targetHost = "${name}.infra.noratrieb.dev";
 
+  # TODO: ensure that the rust programs have frame pointers
+
   networking.hosts = {
     "${networkingConfig.vps3.wg.privateIP}" = [ "loki.internal" "pyroscope.internal" "prometheus.internal" ];
   };