Anubis 配置安装指南：为你的网站加上 PoW 护盾

1
# ============================================
2
# 机器人规则配置
3
# ============================================
4
bots:
5
  - name: example-rule          # 规则名称（示例规则）
6
    user_agent_regex: ".*bot.*" # 匹配User-Agent中包含"bot"的请求（不区分大小写）
7
    action: DENY                # 对该类请求执行的操作：DENY（拒绝访问）
8

9
# ============================================
10
# 数据存储配置
11
# ============================================
12
store:
13
  backend: bbolt                # 使用bbolt作为后端存储（嵌入式键值数据库）
14
  parameters:
15
    path: /data/anubis.bdb     # 数据库文件存储路径（持久化数据）
16

17
# ============================================
18
# 挑战阈值规则配置
19
# ============================================
20
thresholds:
21
  - name: challenge-everyone    # 规则名称：对所有用户进行挑战
22
    expression:                 # 触发条件表达式
23
      all:                      # 所有条件都必须满足（逻辑与）
24
        - weight >= 0          # 权重大于等于0（实际上所有请求都满足）
25
    action: CHALLENGE          # 触发动作：CHALLENGE（发起挑战验证）
26
    challenge:
27
      algorithm: fast          # 挑战算法：fast（快速哈希计算）
28
      difficulty: 5            # 难度级别：5（数值越高计算越复杂，建议范围3-6）
29

30
# ============================================
31
# 日志配置
32
# ============================================
33
logging:
34
  sink: stdio                  # 日志输出目标：stdio（标准输入输出，控制台）
35
  level: INFO                  # 日志级别：INFO（信息级，记录一般操作信息）
36

37
# ============================================
38
# HTTP状态码配置
39
# ============================================
40
status_codes:
41
  CHALLENGE: 200               # 挑战响应状态码：200（正常响应，页面包含挑战内容）
42
  DENY: 403                    # 拒绝响应状态码：403（禁止访问）
43

44
# ============================================
45
# DNS黑名单配置
46
# ============================================
47
dnsbl: false                   # DNS黑名单功能：禁用（false表示不启用DNSBL检查）
48

49
# ============================================
50
# DNS缓存TTL配置
51
# ============================================
52
dns_ttl:
53
  forward: 300                 # 正向DNS解析缓存时间：300秒（5分钟）
54
  reverse: 300                 # 反向DNS解析缓存时间：300秒（5分钟）
55

56
# ============================================
57
# Open Graph元标签配置
58
# ============================================
59
openGraph:
60
  enabled: false               # Open Graph支持：禁用（不生成OG元标签，用于社交媒体分享）

1
services:
2
  anubis:
3
    image: ghcr.io/techarohq/anubis:latest
4
    container_name: anubis
5
    environment:
6
      BIND: ":8923"
7
      TARGET: " "
8
      POLICY_FNAME: "/config/botPolicy.yaml"
9
      ED25519_PRIVATE_KEY_HEX_FILE: "/secrets/anubis.key"
10
      SLOG_LEVEL: "INFO"
11
      AUTH_REQUEST_MODE: "true"
12
    healthcheck:
13
      test: ["CMD", "anubis", "--healthcheck"]
14
      interval: 5s
15
      timeout: 30s
16
      retries: 5
17
      start_period: 500ms
18
    volumes:
19
      - "./botPolicy.yaml:/config/botPolicy.yaml:ro"
20
      - "./anubis.key:/secrets/anubis.key:ro"
21
      - "./anubis-data:/data"
22
    networks:
23
      - 1panel-network
24
    restart: unless-stopped
25

26
networks:
27
  1panel-network:
28
    external: true

8 collapsed lines
1
server {
2
    listen 80 ;
3
    listen 443 ssl ;
4
    server_name xomu.ren;
5
    index index.php index.html index.htm default.php default.htm default.html;
6
    access_log /www/sites/xomu.ren/log/access.log main;
7
    error_log /www/sites/xomu.ren/log/error.log;
8

9
    location /.within.website/ {
10
        proxy_pass http://anubis:8923; # 需要确保 nginx 和 docker 在同一网络
11
        proxy_set_header X-Real-IP $remote_addr;
12
        proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
13
        proxy_set_header Host $host;
14
        proxy_pass_request_body off;
15
        proxy_set_header Content-Length "";
16
        auth_request off;
17
    }
12 collapsed lines
18

19
    location ~ ^/(\.user.ini|\.htaccess|\.git|\.env|\.svn|\.project|LICENSE|README.md) {
20
        return 404;
21
    }
22
    location ^~ /.well-known/acme-challenge {
23
        allow all;
24
        root /usr/share/nginx/html;
25
    }
26
    if ( $uri ~ "^/\.well-known/.*\.(php|jsp|py|js|css|lua|ts|go|zip|tar\.gz|rar|7z|sql|bak)$" ) {
27
        return 403;
28
    }
29

30
    location @redirect_to_anubis {
31
        return 307 /.within.website/?redir=$scheme://$host$request_uri;
32
        auth_request off;
33
    }
34
    location / {
35
        auth_request /.within.website/x/cmd/anubis/api/check;
36
        error_page 401 403 = @redirect_to_anubis;
37
    }
17 collapsed lines
38
    root /www/sites/xomu.ren/index;
39
    error_page 404 /404.html;
40
    http2 on;
41
    if ($scheme = http) {
42
        return 301 https://$host$request_uri;
43
    }
44
    ssl_certificate /www/sites/xomu.ren/ssl/fullchain.pem;
45
    ssl_certificate_key /www/sites/xomu.ren/ssl/privkey.pem;
46
    ssl_protocols TLSv1.3 TLSv1.2;
47
    ssl_ciphers ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES128-GCM-SHA256:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES128-SHA256:!aNULL:!eNULL:!EXPORT:!DSS:!DES:!RC4:!3DES:!MD5:!PSK:!KRB5:!SRP:!CAMELLIA:!SEED;
48
    ssl_prefer_server_ciphers off;
49
    ssl_session_cache shared:SSL:10m;
50
    ssl_session_timeout 10m;
51
    error_page 497 https://$host$request_uri;
52
    proxy_set_header X-Forwarded-Proto https;
53
    add_header Strict-Transport-Security "max-age=31536000; includeSubDomains";
54
}