we're barack

common/0x0.conf

@@ -14,3 +14,6 @@ location / {
 location /up {
 	internal;
 }
+if ($badagent) {
+	return 403;
+}

common/agreper.conf

@@ -1,10 +0,0 @@
-add_header Onion-Location http://ag.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
-add_header X-I2P-Location http://vern6xwzdgt2l7jhgl5dyv6cqjfhd2fnbgbm7i7cd6ssfboqra5a.b32.i2p$request_uri;
-
-location / {
-	proxy_pass http://127.0.0.1:8007/;
-	proxy_redirect off;
-	proxy_set_header Host $host;
-	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-	proxy_set_header X-Forwarded-Proto $scheme;
-}

common/akkoma.conf

@@ -25,3 +25,6 @@ location ~ ^/(media|proxy) {
 	chunked_transfer_encoding on;
 	proxy_pass         http://phoenix;
 }
+if ($badagent) {
+	return 403;
+}

common/anonymousoverflow.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/bbs.conf

@@ -1,8 +1,5 @@
 add_header Onion-Location http://vern5pgpfjdplnz7yhqazesx62hrx6r6i4xvv4kjshwefwikkjjuvwad.onion$request_uri;
 add_header X-I2P-Location http://vern6wnypbds4y6zdht5j4ruufbtb4zlcm3baez5w72wjtgiw6ea.b32.i2p$request_uri;
-#access_log off;
-access_log /var/log/nginx/access.log;
-error_log /var/log/nginx/error.log crit;
 
 location / {
 	proxy_pass http://10.0.3.223:80/;
@@ -11,3 +8,6 @@ location / {
 	proxy_http_version 1.1;	 # to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/beatbump.conf

@@ -10,3 +10,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
 }
+if ($badagent) {
+	return 403;
+}

common/biblioreads.conf

@@ -8,3 +8,6 @@ location / {
 #	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/binternet.conf

@@ -9,3 +9,6 @@ location ~ \.php$ {
 	fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 	include /etc/nginx/snippets/fastcgi.conf;
 }
+if ($badagent) {
+	return 403;
+}

common/bloat.conf

@@ -7,3 +7,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
 }
+if ($badagent) {
+	return 403;
+}

common/breezewiki.conf

@@ -10,3 +10,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/cinny.conf

@@ -21,3 +21,6 @@ location /config {
 # redirect server error pages to the static page /50x.html
 #
 error_page   500 502 503 504  /50x.html;
+if ($badagent) {
+	return 403;
+}

common/conversejs.conf

@@ -7,3 +7,6 @@ index  index.html index.htm;
 location / {
 	try_files $uri $uri/ /index.html;
 }
+if ($badagent) {
+	return 403;
+}

common/cryptpad-darknet.conf

@@ -7,3 +7,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/destructables.conf

@@ -26,3 +26,6 @@ location /contest/archive/ {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cache ds-archive;
 }
+if ($badagent) {
+	return 403;
+}

common/dokuwiki.conf

@@ -3,3 +3,6 @@ add_header X-I2P-Location http://vernknid6kpyzaghegtnypzxe2nx643zrfc4jivh2tlna5m
 
 root /sshfs/websiteupdate/wiki/output;
 index index.html;
+if ($badagent) {
+	return 403;
+}

common/dumb.conf

@@ -8,3 +8,6 @@ location / {
 #	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/etherpad.conf

@@ -1,11 +0,0 @@
-location / {
-	proxy_pass         http://127.0.0.1:8057;
-	proxy_buffering    off; # be careful, this line doesn't override any proxy_buffering on set in a conf.d/file.conf
-	proxy_set_header   Host $host;
-	proxy_pass_header  Server;
-	proxy_set_header    X-Forwarded-For $remote_addr; # EP logs to show the actual remote IP
-	proxy_set_header    X-Forwarded-Proto $scheme; # for EP to set secure cookie flag when https is used
-	proxy_http_version  1.1; # recommended with keepalive connections
-	# WebSocket proxying - from https://nginx.org/en/docs/http/websocket.html
-	proxy_set_header  Upgrade $http_upgrade;
-}

common/federationtester.conf

@@ -10,3 +10,6 @@ location / {
 }
 
 root /home/fed-tester/fed-tester-ui/build;
+if ($badagent) {
+	return 403;
+}

common/fluffychat.conf

@@ -21,3 +21,6 @@ location /config {
 # redirect server error pages to the static page /50x.html
 #
 error_page   500 502 503 504  /50x.html;
+if ($badagent) {
+	return 403;
+}

common/freshrss.conf

@@ -4,7 +4,6 @@ add_header X-I2P-Location http://vern5vicrpk2n4knr3c2qfyu5g4cjiwiulqa4txrriske7v
 root /var/www/freshrss/p/;
 index index.php index.html index.htm;
 # nginx log files
-access_log /var/log/nginx/rss.access.log;
 error_log /var/log/nginx/rss.error.log;
 # php files handling
 # this regex is mandatory because of the API
@@ -26,3 +25,6 @@ location / {
 }
 
 
+if ($badagent) {
+	return 403;
+}

common/ftelnet.conf

@@ -6,3 +6,6 @@ root /var/www/ftelnet/release;
 location / {
 	index index.html;
 }
+if ($badagent) {
+	return 403;
+}

common/gitea.conf

@@ -12,3 +12,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
 }
+if ($badagent) {
+	return 403;
+}

common/gnunet.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/gopherproxy.conf

@@ -1,8 +1,6 @@
 add_header Onion-Location http://gp.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://vernpl3z5syo5sblwnna2v4ktdwjmdotbta4346zekfi64is7idq.b32.i2p$request_uri;
 
-#access_log off;
-access_log /var/log/nginx/access.log;
 error_log /var/log/nginx/error.log crit;
 
 location / {
@@ -12,3 +10,6 @@ location / {
 	proxy_http_version 1.1;	 # to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/gothub.conf

@@ -7,3 +7,6 @@ error_log /var/log/nginx/error.log crit;
 location / {
 	return 301 https://vern.cc/blog/odyssey.html;
 }
+if ($badagent) {
+	return 403;
+}

common/gts.conf

@@ -11,3 +11,6 @@ location / {
 }
 client_max_body_size 40M;
 
+if ($badagent) {
+	return 403;
+}

common/guac.conf

@@ -9,3 +9,6 @@ location / {
 	proxy_set_header Upgrade $http_upgrade;
 	proxy_set_header Connection $http_connection;
 }
+if ($badagent) {
+	return 403;
+}

common/hat.conf

@@ -9,3 +9,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
 
+if ($badagent) {
+	return 403;
+}

common/hckrnws.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/hedgedoc.conf

@@ -18,3 +18,6 @@ location /socket.io/ {
 	proxy_set_header Upgrade $http_upgrade;
 	proxy_set_header Connection $connection_upgrade;
 }
+if ($badagent) {
+	return 403;
+}

common/hydrogen.conf

@@ -21,3 +21,6 @@ location /config {
 # redirect server error pages to the static page /50x.html
 #
 error_page   500 502 503 504  /50x.html;
+if ($badagent) {
+	return 403;
+}

common/hyperpipe-api.conf

@@ -7,3 +7,6 @@ location / {
 	proxy_set_header Host $host;
 	proxy_hide_header Access-Control-Allow-Origin;
 }
+if ($badagent) {
+	return 403;
+}

common/hyperpipe.conf

@@ -4,3 +4,6 @@ add_header X-I2P-Location http://vern2dwmqcksmq3oe5kynqc6gy4btviaimqhr55kg6zedjc
 location / {
 	root /privfrontend/home/hyperpipe/Hyperpipe/dist;
 }
+if ($badagent) {
+	return 403;
+}

common/icecast.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/invidious.conf

@@ -12,3 +12,6 @@ location / {
 	proxy_http_version 1.1;	 # to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/jellyfin.conf

@@ -28,3 +28,6 @@ location /socket {
 	proxy_set_header X-Forwarded-Protocol $scheme;
 	proxy_set_header X-Forwarded-Host $http_host;
 }
+if ($badagent) {
+	return 403;
+}

common/lab.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/libmedium.conf

@@ -4,9 +4,12 @@ add_header X-I2P-Location http://vernaqj2qr2pijpgvf3od6ssc3ulz3nv52gwr3hba5l6hum
 subs_filter md.vern.cc $host;
 
 location / {
-	proxy_pass http://10.0.3.57:6543/;
+	proxy_pass http://127.0.0.1:6543/;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/librarian.conf

@@ -1,8 +1,6 @@
 add_header Onion-Location http://lbry.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://vernb4mvgeej5kawfg3tm337sbihdf4i6oy7w4trirgsnaq67zva.b32.i2p$request_uri;
 
-#access_log off;
-access_log /var/log/nginx/access.log;
 error_log /var/log/nginx/error.log crit;
 
 location / {
@@ -12,3 +10,6 @@ location / {
 	proxy_http_version 1.1;	 # to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/libreddit.conf

@@ -10,3 +10,6 @@ location / {
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/libremdb.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/libretranslate.conf

@@ -7,3 +7,6 @@ location / {
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/librex.conf

@@ -16,3 +16,6 @@ location ~ \.php$ {
 	fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 	include /etc/nginx/snippets/fastcgi.conf;
 }
+if ($badagent) {
+	return 403;
+}

common/lists.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/littlelink.conf

@@ -30,3 +30,6 @@ location ~ \.env$ { deny all; }
 
 location ~ /\.htaccess { allow all; }
 
+if ($badagent) {
+	return 403;
+}

common/mail.conf

@@ -5,7 +5,7 @@ root /srv/modoboa/instance;
 
 client_max_body_size 10M;
 
-access_log /var/log/nginx/mail.vern.cc-access.log;
+access_log /var/log/nginx/mail.vern.cc-access.log main;
 error_log /var/log/nginx/mail.vern.cc-error.log;
 
 location /sitestatic/ {
@@ -51,3 +51,6 @@ location /radicale/ {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_pass_header Authorization;
 }
+if ($badagent) {
+	return 403;
+}

common/mastodon.conf

@@ -1,53 +0,0 @@
-add_header Onion-Location http://fedi.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
-add_header X-I2P-Location http://verncc3ifybf2wvag5sgjmpsdp4lcv3ppuvpnlihcgffuqytkaxa.b32.i2p$request_uri;
-
-keepalive_timeout    70;
-sendfile             on;
-client_max_body_size 80m;
-
-root /home/mastodon/live/public;
-error_log /var/log/nginx/mastodon.err;
-
-gzip on;
-gzip_disable "msie6";
-gzip_vary on;
-gzip_proxied any;
-gzip_comp_level 6;
-gzip_buffers 16 8k;
-gzip_http_version 1.1;
-gzip_types text/plain text/css application/json application/javascript text/xml application/xml application/xml+rss text/javascript image/svg+xml image/x-icon;
-
-#add_header Strict-Transport-Security "max-age=31536000" always;
-
-location / {
-	try_files $uri @proxy;
-}
-
-location ~ ^/(emoji|packs|system/accounts/avatars|system/media_attachments/files) {
-	add_header Cache-Control "public, max-age=31536000, immutable";
-	try_files $uri @proxy;
-}
-
-location /sw.js {
-	add_header Cache-Control "public, max-age=0";
-	try_files $uri @proxy;
-}
-
-location @proxy {
-	proxy_set_header Host $host;
-	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-	proxy_set_header X-Forwarded-Proto $scheme;
-	proxy_set_header Proxy "";
-	proxy_pass_header Server;
-
-	proxy_pass http://backend;
-	proxy_buffering on;
-	proxy_redirect off;
-	proxy_http_version 1.1;
-	proxy_set_header Upgrade $http_upgrade;
-	proxy_set_header Connection $connection_upgrade;
-
-	proxy_cache CACHE;
-	proxy_cache_valid 200 7d;
-	proxy_cache_valid 410 24h;
-}

common/matrix-static.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/matrix-sydent.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/matrixto.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/miniflux.conf

@@ -9,3 +9,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
 }
+if ($badagent) {
+	return 403;
+}

common/mirror.conf

@@ -32,3 +32,6 @@ location /gnu {
 
 	subs_filter  "body,html {background:#fff;font-family:\"Bitstream Vera Sans\",\"Lucida Grande\",\"Lucida Sans Unicode\",Lucidux,Verdana,Lucida,sans-serif;}tr:nth-child(even) {background:#f4f4f4;}th,td {padding:0.1em 0.5em;}th {text-align:left;font-weight:bold;background:#eee;border-bottom:1px solid #aaa;}#list {border:1px solid #aaa;width:100%;}a {color:#a33;}a:hover {color:#e33;}" "";
 }
+if ($badagent) {
+	return 403;
+}

common/morss.conf

@@ -6,3 +6,6 @@ location / {
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/mumble.conf

@@ -11,3 +11,6 @@ location /vern {
 	proxy_set_header Upgrade $http_upgrade;
 	proxy_set_header Connection $connection_upgrade;
 }
+if ($badagent) {
+	return 403;
+}

common/neuters.conf

@@ -2,9 +2,12 @@ add_header Onion-Location http://nu.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajh
 add_header X-I2P-Location http://vernkhr6duyh3tvrh7erkrwpwbqpztulwizzr2ma4ivvmr3xbdga.b32.i2p$request_uri;
 
 location / {
-	proxy_pass http://10.0.3.57:13370/;
+	proxy_pass http://10.0.3.57:13369/;
 	proxy_http_version 1.1;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/nextcloud.conf

@@ -144,3 +144,6 @@ location /remote {
 location / {
 	try_files $uri $uri/ /index.php$request_uri;
 }
+if ($badagent) {
+	return 403;
+}

common/nitter.conf

@@ -4,9 +4,12 @@ add_header X-I2P-Location http://vernzdedoxuflrrxc4vbatbkpjh4k22ecgiqgimdiif62on
 error_log off;
 
 location / {
-	proxy_pass http://10.0.3.57:5744/;
+	proxy_pass http://127.0.0.1:5744/;
 	proxy_http_version 1.1;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/ntfy.conf

@@ -16,3 +16,6 @@ location / {
 	proxy_read_timeout 3m;
 	client_max_body_size 20m; # Must be >= attachment-file-size-limit in /etc/ntfy/server.yml
 }
+if ($badagent) {
+	return 403;
+}

common/owncast.conf

@@ -13,3 +13,6 @@ location / {
 	proxy_set_header Connection $connection_upgrade;
 	proxy_pass http://127.0.0.1:5394;
 }
+if ($badagent) {
+	return 403;
+}

common/peertube.conf

@@ -191,3 +191,6 @@ location ~ ^/static/(webseed|redundancy|streaming-playlists)/ {
   try_files $uri @api;
 }
 
+if ($badagent) {
+	return 403;
+}

common/penpot.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/pgp.conf

@@ -2,3 +2,6 @@ add_header Onion-Location http://pgp.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kaj
 add_header X-I2P-Location http://vernqfnkg7oybcbrr6roinm64wkd6goetv4funbqjgtddmsexo7q.b32.i2p$request_uri;
 root /var/www/pgp;
 index index.html index.htm;
+if ($badagent) {
+	return 403;
+}

common/piped.conf

@@ -10,3 +10,6 @@ if ($http_user_agent = "FeedFetcher-Google; (+http://www.google.com/feedfetcher.
 	return 403;
 }
 
+if ($badagent) {
+	return 403;
+}

common/privatebin.conf

@@ -14,3 +14,6 @@ location ~ \.php$ {
 	fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 	include /etc/nginx/snippets/fastcgi.conf;
 }
+if ($badagent) {
+	return 403;
+}

common/proxigram.conf

@@ -0,0 +1,15 @@
+add_header Onion-Location http://ig.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+add_header X-I2P-Location http://vernatajdc43yxqrtgyhpynuxxksiwrcayqk7xdflkuqss2f4soa.b32.i2p$request_uri;
+
+recursive_error_pages on;
+
+location / {
+	proxy_pass http://10.0.3.57:3445;
+	proxy_redirect off;
+	proxy_set_header Host $host;
+	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
+	proxy_set_header X-Forwarded-Proto $scheme;
+}
+if ($badagent) {
+	return 403;
+}

common/proxitok.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/quetre.conf

@@ -1,8 +1,6 @@
 add_header Onion-Location http://qr.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://vernnflenvsqccuanaun7yydnmturi4jkyxlyzhn6ultpje66c3q.b32.i2p$request_uri;
 
-access_log /var/log/nginx/quetre-access.log;
-
 location / {
 #	proxy_pass http://10.0.3.57:5068/;
 	proxy_pass http://crescent.vern.cc:5068/;
@@ -16,3 +14,6 @@ location / {
 if ($http_user_agent = "Mozilla/5.0 (compatible; Farside/0.1.0; +https://farside.link)") {
 	return 403;
 }
+if ($badagent) {
+	return 403;
+}

common/rimgo.conf

@@ -1,9 +1,6 @@
-access_log /var/log/nginx/access.log;
 add_header Onion-Location http://rg.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://vernu3bfx2rvpuaccs5q27yncv6srdijkan6ixbkvyc2lsbrslxq.b32.i2p$request_uri;
 
-#access_log off;
-access_log /var/log/nginx/access.log;
 error_log /var/log/nginx/error.log crit;
 
 subs_filter rimgo.vern.cc $host;
@@ -15,3 +12,6 @@ location / {
 	proxy_http_version 1.1;         # to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/riot.conf

@@ -21,3 +21,6 @@ location /config {
 # redirect server error pages to the static page /50x.html
 #
 error_page   500 502 503 504  /50x.html;
+if ($badagent) {
+	return 403;
+}

common/roundcube.conf

@@ -22,3 +22,6 @@ location ~ \.php(?:$|/) {
 }
 
 
+if ($badagent) {
+	return 403;
+}

common/rssbridge.conf

@@ -14,3 +14,6 @@ location ~ \.php$ {
 	fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 	include /etc/nginx/snippets/fastcgi.conf;
 }
+if ($badagent) {
+	return 403;
+}

common/ruraldict.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/safetwitch-backend.conf

@@ -9,3 +9,6 @@ location / {
 	proxy_set_header X-Forwarded-For $remote_addr;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/safetwitch.conf

@@ -8,7 +8,7 @@ add_header X-Frame-Options "DENY";
 add_header Clear-Site-Data "cookies";
 add_header Referrer-Policy "no-referrer";
 add_header Permissions-Policy "interest-cohort=(),accelerometer=(),ambient-light-sensor=(),autoplay=(),camera=(),encrypted-media=(),focus-without-user-activation=(),geolocation=(),gyroscope=(),magnetometer=(),microphone=(),midi=(),payment=(),picture-in-picture=(),speaker=(),sync-xhr=(),usb=(),vr=()";
-add_header Onion-Location http://sw.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
+add_header Onion-Location http://ttv.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://vernz43kgqiy3nzzof3nejeo4hh3bjgyqi3b3hijchilv7noqtrq.b32.i2p$request_uri;
 
 location / {
@@ -16,3 +16,6 @@ location / {
 	index index.html;
 	try_files $uri $uri/ /index.html;
 }
+if ($badagent) {
+	return 403;
+}

common/scribe.conf

@@ -11,3 +11,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
 }
+if ($badagent) {
+	return 403;
+}

common/searxng.conf

@@ -17,3 +17,6 @@ location / {
 	uwsgi_param    HTTP_X_REAL_IP        $remote_addr;
 	uwsgi_param    HTTP_X_FORWARDED_FOR  $proxy_add_x_forwarded_for;
 }
+if ($badagent) {
+	return 403;
+}

common/simpleamazon.conf

@@ -1,8 +1,6 @@
 add_header Onion-Location http://az.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://vernlncxo4aswplv7naacpjvp5ts4uhrv4wbv3y4skufdbz763gq.b32.i2p$request_uri;
 
-#access_log off;
-access_log /var/log/nginx/access.log;
 error_log /var/log/nginx/error.log crit;
 
 location / {
@@ -12,3 +10,6 @@ location / {
 	proxy_http_version 1.1;	 # to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/simpleertube.conf

@@ -7,3 +7,6 @@ location / {
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/simplelogin.conf

@@ -1,7 +1,6 @@
 add_header Onion-Location http://sl.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://verndokks33kdmyo23qihg45lb4sinl6f6b34hc7be6754p3b4aa.b32.i2p$request_uri;
 #access_log off;
-access_log /var/log/nginx/access.log;
 error_log /var/log/nginx/error.log crit;
 
 location / {
@@ -11,3 +10,6 @@ location / {
 	proxy_http_version 1.1;	 # to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/simplytranslate.conf

@@ -7,3 +7,6 @@ location / {
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/speedtest.conf

@@ -9,3 +9,6 @@ location / {
 	proxy_set_header   Upgrade $http_upgrade;
 	proxy_set_header   Connection "upgrade";
 }
+if ($badagent) {
+	return 403;
+}

common/spyda.conf

@@ -11,3 +11,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
 }
+if ($badagent) {
+	return 403;
+}

common/srht.conf

@@ -5,3 +5,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/suds.conf

@@ -17,3 +17,6 @@ location /proxy/ {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cache suds;
 }
+if ($badagent) {
+	return 403;
+}

common/teddit.conf

@@ -9,3 +9,6 @@ location / {
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/tent.conf

@@ -12,3 +12,6 @@ location ~ \.php$ {
 	fastcgi_param SCRIPT_FILENAME $document_root$fastcgi_script_name;
 	include /etc/nginx/snippets/fastcgi.conf;
 }
+if ($badagent) {
+	return 403;
+}

common/tmate.conf

@@ -6,3 +6,6 @@ location / {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
 }
+if ($badagent) {
+	return 403;
+}

common/torproject.conf

@@ -4,3 +4,6 @@ root /var/mirror/torproject.org;
 location / {
 	autoindex on;
 }
+if ($badagent) {
+	return 403;
+}

common/usersites-socket.conf

@@ -13,3 +13,6 @@ location / {
 	proxy_set_header Upgrade $http_upgrade;
 	proxy_set_header Connection $connection_upgrade;
 }
+if ($badagent) {
+	return 403;
+}

common/usersites.conf

@@ -25,6 +25,7 @@ location ~ (\.cgi|\.py|\.sh|\.pl|\.lua|\/cgi-bin)$ {
 
 autoindex on;
 autoindex_exact_size off;
+charset utf-8;
 
 #location / {
 	#try_files @socket =404;
@@ -39,3 +40,6 @@ location /media {
 	autoindex on;
 }
 
+if ($badagent) {
+	return 403;
+}

common/vaultwarden.conf

@@ -36,3 +36,6 @@ location /admin {
 	proxy_set_header X-Forwarded-Proto $scheme;
 	proxy_pass http://localhost:8056;
 }
+if ($badagent) {
+	return 403;
+}

common/vikunja.conf

@@ -1,26 +0,0 @@
-add_header Onion-Location http://todo.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
-add_header X-I2P-Location http://verniioll6ezxh2ns3l2hbt76zlklmwqguomnjgg37olnmbhgodq.b32.i2p$request_uri;
-
-subs_filter "todo.vern.cc" "$host";
-
-location / {
-	root /var/www/vikunja-frontend/dist;
-	try_files $uri $uri/ /;
-	index index.html index.htm;
-}
-
-location ~* ^/(api|dav|\.well-known)/ {
-	proxy_pass http://127.0.0.1:3456;
-	client_max_body_size 20M;
-}
-gzip on;
-gzip_disable "msie6";
-
-gzip_vary on;
-gzip_proxied any;
-gzip_comp_level 6;
-gzip_buffers 16 8k;
-gzip_http_version 1.1;
-gzip_min_length 256;
-gzip_types text/plain text/css application/json application/x-javascript text/xml application/xml application/xml+rss text/javascript application/vnd.ms-fontobject application/x-font-ttf font/opentype image/svg+xml;
-

common/vnu.conf

@@ -6,3 +6,6 @@ location / {
 	proxy_redirect off;
 	proxy_set_header Host $host;
 }
+if ($badagent) {
+	return 403;
+}

common/website.conf

@@ -1,7 +1,6 @@
 add_header Onion-Location http://vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://verncceu2kgz54wi7r5jatgmx2mqtsh3knxhiy4m5shescuqtqfa.b32.i2p$request_uri;
 root /var/www/website;
-access_log /var/log/nginx/access.log;
 index index.html index.php;
 ssi on;
 gzip on;
@@ -85,12 +84,12 @@ location /sitemap {
 	error_page 404 /en/errors/404;
 	error_page 503 /en/errors/503;
 }
-location /status {
-	vhost_traffic_status_display;
-	vhost_traffic_status_display_format html;
-	auth_basic "Administrator Login";
-	auth_basic_user_file /var/www/htpasswd;
-}
+#location /status {
+#	vhost_traffic_status_display;
+#	vhost_traffic_status_display_format html;
+#	auth_basic "Administrator Login";
+#	auth_basic_user_file /var/www/htpasswd;
+#}
 
 location ~^/[^u~].*\.(jpg|jpeg|png|gif|ico)$ {
 	expires 30d;
@@ -192,3 +191,6 @@ location ~ ^/(~|u/)(?<user>[\w-]+)(?<user_uri>/.*)?$ {
 	}
 }
 
+if ($badagent) {
+	return 403;
+}

common/whoogle.conf

@@ -2,9 +2,12 @@ add_header Onion-Location http://wg.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajh
 add_header X-I2P-Location http://verneks7rfjptpz5fpii7n7nrxilsidi2qxepeuuf66c3tsf4nhq.b32.i2p$request_uri;
 
 location / {
-	proxy_pass http://10.0.3.57:5015/;
+	proxy_pass http://127.0.0.1:5015/;
 	proxy_set_header X-Forwarded-For $remote_addr;
 	proxy_set_header Host $host;	# so Whoogle knows domain
 	proxy_http_version 1.1;	# to keep alive
 	proxy_set_header Connection ""; # to keep alive
 }
+if ($badagent) {
+	return 403;
+}

common/wikiless.conf

@@ -2,9 +2,12 @@ add_header Onion-Location http://wl.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajh
 add_header X-I2P-Location http://vernesciy2defjsputrjrv6pa5ll6qzrckfffi5lgkumstdojyga.b32.i2p$request_uri;
 
 location / {
-	proxy_pass http://10.0.3.57:6629/;
+	proxy_pass http://127.0.0.1:6629/;
 	proxy_http_version 1.1;
 	proxy_redirect off;
 	proxy_set_header Host $host;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}

common/woodpeckerci.conf

@@ -11,3 +11,6 @@ location / {
 	proxy_buffering off;
 	chunked_transfer_encoding off;
 }
+if ($badagent) {
+	return 403;
+}

common/yacy.conf

@@ -1,2 +1,5 @@
 add_header Onion-Location http://yacy.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
 add_header X-I2P-Location http://vernxiu4oiyb6t2impixu7kqot4irhdr3pzmgszbaxjbpwblapeq.b32.i2p$request_uri;
+if ($badagent) {
+	return 403;
+}

common/yarn.conf

@@ -1,14 +0,0 @@
-add_header Onion-Location http://yn.vernccvbvyi5qhfzyqengccj7lkove6bjot2xhh5kajhwvidqafczrad.onion$request_uri;
-add_header X-I2P-Location http://vernlebgbpxnln2oluosc4hrnjr7byg2e5pqiwi2phhwmudbhirq.b32.i2p$request_uri;
-
-subs_filter_types text/html text/css text/xml application/javascript text/plain;
-subs_filter "yn.vern.cc" "$host";
-
-location / {
-	proxy_pass http://127.0.0.1:8481/;
-	proxy_redirect off;
-	proxy_set_header Host $host;
-	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
-	proxy_set_header X-Forwarded-Proto $scheme;
-	proxy_cookie_path / "/; Secure; HttpOnly; SameSite=lax";
-}

common/znc.conf

@@ -8,3 +8,6 @@ location / {
 	proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
 	proxy_set_header X-Forwarded-Proto $scheme;
 }
+if ($badagent) {
+	return 403;
+}