block alibaba

privfrontends/playbook.yaml

@@ -16,6 +16,8 @@
       when: service.value.docker_settings
 - name: Setup Caddy
   hosts: privfrontends
+  vars_files:
+    - ./blocked-ranges.yaml
   tasks:
     - name: Copy Caddyfile
       ansible.builtin.template:

privfrontends/templates/Caddyfile.j2

@@ -76,6 +76,10 @@
 		           }
 		        }
 		}
+		@denied client_ip {{ blocked_ranges }}
+		respond @denied 403 "Unfortunately, your IP is part of a range that has been involved in mass spam to our servers. If you think our action was a mistake, please email contact@projectsegfau.lt."
+		
+
         import acmedns
 }