From 45c28c27c5dbef5158a240b25a0fc14a96babbcc Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Wed, 15 Jun 2022 14:18:39 -0700
Subject: [PATCH] pagure: add hack to 403 DDoS attack

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/pagure/templates/0_pagure.conf | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/roles/pagure/templates/0_pagure.conf b/roles/pagure/templates/0_pagure.conf
index 8ccea9f618..fe1a15001e 100644
--- a/roles/pagure/templates/0_pagure.conf
+++ b/roles/pagure/templates/0_pagure.conf
@@ -123,6 +123,12 @@ WSGIDaemonProcess paguredocs user=git group=git maximum-requests=1000 display-na
 {% endif %}
   </Location>
 
+
+  # Drop distributed web hits
+  RewriteEngine On
+  RewriteCond %{REQUEST_URI} ^/fedora-web/websites$
+  RewriteRule .* - [F]
+
   <Location /apache-status>
       SetHandler server-status
       <RequireAny>