Anubis

Anubis

Aplicación Docker from grtgbln's Repository

Visión general

Anubis is a Web AI Firewall Utility that weighs the soul of your connection using one or more challenges in order to protect upstream resources from scraper bots.
This program is designed to help protect the small internet from the endless storm of requests that flood in from AI companies. Anubis is as lightweight as possible to ensure that everyone can afford to protect the communities closest to them.
See configuration instructions: https://anubis.techaro.lol/docs/admin/installation/#configuration

Requisitos


        Expects a `botPolicy.yaml` file to be mounted at `/mnt/user/appdata/anubis/botPolicy.yaml` before starting the container. See configuration details: https://anubis.techaro.lol/docs/admin/installation/#configuration
    

Argumentos en tiempo de ejecución

Interfaz web
http://[IP]:[PORT:8923]/
Red
bridge
Privilegiado
false

Configuración de plantillas

Web UI PortPorttcp

Container Port: 8923

Objetivo
8923
Por defecto
8923
Valor
8923
Metrics PortPorttcp

Container Port: 9090

Objetivo
9090
Por defecto
9090
Valor
9090
TargetVariable

The URL of the service that Anubis should forward valid requests to. Supports Unix domain sockets, set this to a URI like so: unix:///path/to/socket.sock.

Objetivo
TARGET
Por defecto
http://localhost:3923
Valor
http://localhost:3923
Policy FilePathro

Path to the bot policy file.

Objetivo
/data/cfg/botPolicy.yaml
Por defecto
/mnt/user/appdata/anubis/botPolicy.yaml
Valor
/mnt/user/appdata/anubis/botPolicy.yaml
Base PrefixVariable

If set, adds a global prefix to all Anubis endpoints. For example, setting this to /myapp would make Anubis accessible at /myapp/ instead of /. This is useful when running Anubis behind a reverse proxy that routes based on path prefixes.

Objetivo
BASE_PREFIX
Bind PortVariable

Internal bind port to the host system

Objetivo
BIND
Por defecto
:8923
Valor
:8923
Bind NetworkVariable

The address family that Anubis listens on

Objetivo
BIND_NETWORK
Por defecto
tcp
Valor
tcp
Cookie - DomainVariable

The domain the Anubis challenge pass cookie should be set to. This should be set to the domain you bought from your registrar (EG: techaro.lol if your webapp is running on anubis.techaro.lol)

Objetivo
COOKIE_DOMAIN
Cookie - Dynamic DomainVariable

If set to true, automatically set cookie domain fields based on the hostname of the request. EG: if you are making a request to anubis.techaro.lol, the Anubis cookie will be valid for any subdomain of techaro.lol.

Objetivo
COOKIE_DYNAMIC_DOMAIN
Por defecto
false|true
Cookie - Expiration TimeVariable

The amount of time the authorization cookie is valid for.

Objetivo
COOKIE_EXPIRATION_TIME
Por defecto
168h
Valor
168h
Cookie - PartitionedVariable

If set to true, enables the partitioned (CHIPS) flag, meaning that Anubis inside an iframe has a different set of cookies than the domain hosting the iframe.

Objetivo
COOKIE_PARTITIONED
Por defecto
false|true
Cookie - SecureVariable

If set to true, enables the Secure flag, meaning that the cookies will only be transmitted over HTTPS. If Anubis is used in an unsecure context (plain HTTP), this will be need to be set to false.

Objetivo
COOKIE_SECURE
Por defecto
true|false
DifficultyVariable

The difficulty of the challenge, or the number of leading zeroes that must be in successful responses.

Objetivo
DIFFICULTY
Por defecto
4
Valor
4
ed25519 Private Key HexVariable

The hex-encoded ed25519 private key used to sign Anubis responses. If this is not set, Anubis will generate one for you. This should be exactly 64 characters long. When running multiple instances on the same base domain, the key must be the same across all instances.

Objetivo
ED25519_PRIVATE_KEY_HEX
ed25519 Private Key Hex FileVariable

Internal path to a file containing the hex-encoded ed25519 private key. Only one of this or its sister option may be set.

Objetivo
ED25519_PRIVATE_KEY_HEX_FILE
Metrics - BindVariable

Internal bind network address that Anubis serves Prometheus metrics on.

Objetivo
METRICS_BIND
Por defecto
:9090
Valor
:9090
Metrics - Bind NetworkVariable

The address family that the Anubis metrics server listens on.

Objetivo
METRICS_BIND_NETWORK
Por defecto
tcp
Valor
tcp
Open Graph - Expiry TimeVariable

The expiration time for the Open Graph tag cache. Prefer using the policy file to configure the Open Graph subsystem.

Objetivo
OG_EXPIRY_TIME
Por defecto
24h
Valor
24h
Open Graph - PassthroughVariable

If set to true, Anubis will enable Open Graph tag passthrough. Prefer using the policy file to configure the Open Graph subsystem.

Objetivo
OG_PASSTHROUGH
Por defecto
false|true
Open Graph - Consider Host CacheVariable

If set to true, Anubis will consider the host in the Open Graph tag cache key. Prefer using the policy file to configure the Open Graph subsystem.

Objetivo
OG_CACHE_CONSIDER_HOST
Por defecto
false|true
Policy File NameVariable

The internal file name containing bot policy configuration. See the bot policy documentation for more details. If unset, the default bot policy configuration is used.

Objetivo
POLICY_FNAME
Redirect DomainsVariable

If set, restrict the domains that Anubis can redirect to when passing a challenge. If unset, Anubis may redirect to any domain which could cause security issues in the unlikely case that an attacker passes a challenge for your browser and then tricks you into clicking a link to your domain. Note, if you are hosting Anubis on a non-standard port, you must also include the port number here.

Objetivo
REDIRECT_DOMAINS
Server Robots.txtVariable

If set true, Anubis will serve a default robots.txt file that disallows all known AI scrapers by name and then additionally disallows every scraper. This is useful if facts and circumstances make it difficult to change the underlying service to serve such a robots.txt file.

Objetivo
SERVE_ROBOTS_TXT
Por defecto
false|true
Strip Base PrefixVariable

If set to true, strips the base prefix from request paths when forwarding to the target server. This is useful when your target service expects to receive requests without the base prefix. For example, with BASE_PREFIX=/foo and STRIP_BASE_PREFIX=true, a request to /foo/bar would be forwarded to the target as /bar.

Objetivo
STRIP_BASE_PREFIX
Por defecto
false|true
Use Remote AddressVariable

If set to true, Anubis will take the client's IP from the network socket. For production deployments, it is expected that a reverse proxy is used in front of Anubis, which pass the IP using headers, instead.

Objetivo
USE_REMOTE_ADDRESS
Webmaster EmailVariable

If set, shows a contact email address when rendering error pages. This email address will be how users can get in contact with administrators.

Objetivo
WEBMASTER_EMAIL
Strip private X-Forwarded-For HeadersVariable

If set, strip private addresses from X-Forwarded-For headers.

Objetivo
XFF_STRIP_PRIVATE
Por defecto
true|false
Socket ModeVariable

Only used when at least one of the *_BIND_NETWORK variables are set to unix. The socket mode (permissions) for Unix domain sockets.

Objetivo
SOCKET_MODE

Detalles

Repositorio
ghcr.io/techarohq/anubis:latest
Última actualización2026-05-31
Visto por primera vez2025-07-22

Ejecute Anubis en Unraid.

Anubis se encuentra en Community Apps para Unraid OS. Explore Unraid para crear un servidor doméstico flexible, un NAS o un laboratorio doméstico.