| 1 | [botdetection] |
| 2 | # Number of values to trust for X-Forwarded-For. |
| 3 | trusted_proxies = ["127.0.0.1"] |
| 4 | |
| 5 | # The prefix defines the number of leading bits in an address that are compared |
| 6 | # to determine whether or not an address is part of a (client) network. |
| 7 | ipv4_prefix = 32 |
| 8 | ipv6_prefix = 48 |
| 9 | |
| 10 | [botdetection.ip_limit] |
| 11 | # To get unlimited access in a local network, by default link-local addresses |
| 12 | # (networks) are not monitored by the ip_limit |
| 13 | filter_link_local = false |
| 14 | |
| 15 | # Activate link_token method in the ip_limit method |
| 16 | link_token = false |
| 17 | |
| 18 | [botdetection.ip_lists] |
| 19 | # In the limiter, the ip_lists method has priority over all other methods. |
| 20 | # If an IP is in the pass_ip list, it has unrestricted access and is not |
| 21 | # checked if, for example, the "user agent" suggests a bot (e.g., curl). |
| 22 | block_ip = [ |
| 23 | # '93.184.216.34', # Example IPv4 address |
| 24 | # '257.1.1.1', # Invalid IP --> will be ignored, logged in ERROR class |
| 25 | ] |
| 26 | pass_ip = [ |
| 27 | # '192.168.0.0/16', # IPv4 private network |
| 28 | # 'fe80::/10', # IPv6 link-local; overrides botdetection.ip_limit.filter_link_local |
| 29 | ] |
| 30 | |
| 31 | # Activate passlist of (hardcoded) IPs from the SearXNG organization, |
| 32 | # e.g., `check.searx.space`. |
| 33 | pass_searxng_org = true |