I have personal git instance and I used nginx testcookie module to show JS challenge for anyone. But I have whitelisted paths that are used for CLI tooling like `git pull`

Reply to this note

Please Login to reply.

Discussion

Interesting. Yeah most of the traffic is for my git website (using CGit) so it's just scraping all of my code and git stuff chewing up a bunch of CPU time building the diffs and whatnot.

I also host a few small business things and nip05 stuff I can't have blocked but that's really not the issue.

Nginx module I am talking about: https://github.com/kyprizel/testcookie-nginx-module

Path are relevant to gitea/forgejo, but I guess it is similar for CGit

```

map $uri $giteach_testcookie_pass {

default 0;

"~*^/api/" 1;

"~*^/assets/" 1;

"~*^/avatars/" 1;

"~*^/\S+/\S+\.git/" 1;

"~*^/\S+/\S+/raw/branch/" 1;

}

```

and use `testcookie_pass $giteach_testcookie_pass;` to selectively disable testcookie in a `location / { ... }` block

That's awesome thank you!