replicaCount: 1

nameOverride: ""
fullnameOverride: ""

image:
  repository: ghcr.io/techarohq/anubis
  tag: ""
  pullPolicy: IfNotPresent

imagePullSecrets: []

target: http://example-service.default.svc.cluster.local:80
publicUrl: https://example.com
redirectDomains: example.com
cookieDomain: example.com
cookieExpirationTime: 1h
serveRobotsTxt: false

signingSecret:
  name: anubis-key
  key: ED25519_PRIVATE_KEY_HEX

policy:
  create: true
  existingConfigMap: ""
  content: |
    bots:
      - import: (data)/bots/_deny-pathological.yaml
      - import: (data)/meta/ai-block-aggressive.yaml
      - name: browser-proof-of-work
        user_agent_regex: Mozilla|Opera
        action: CHALLENGE
        challenge:
          algorithm: fast
          difficulty: 4
      - name: non-browser-proof-of-work
        expression: "true"
        action: CHALLENGE
        challenge:
          algorithm: fast
          difficulty: 4
    status_codes:
      CHALLENGE: 200
      DENY: 403
    store:
      backend: memory
      parameters: {}

podAnnotations: {}

resources:
  requests:
    cpu: 100m
    memory: 128Mi
  limits:
    cpu: 750m
    memory: 256Mi

service:
  annotations: {}

traefik:
  middleware:
    enabled: false
    nameOverride: ""
    trustForwardHeader: true
    maxResponseBodySize: 1048576
  ingressRoute:
    enabled: false
    nameOverride: ""
    entryPoints:
      - websecure
    routes: []

serviceMonitor:
  enabled: false
  labels: {}
  interval: 30s