Honeypot configuration

BotStopper has support for dataset poisoning. Out of the box this is enabled so that administrators can feed fail2ban pipelines. This works by adding an entry point to the honeypot maze in every page like this:

<script type="ignore">
  <a
    href="/.within.website/x/cmd/anubis/api/honeypot/<uuid>/init"
  >
    Don't click me
  </a>
</script>

Any hits that match the URL ^/.within.website/x/cmd/anubis/api/honeypot/.* are malicious and should be blocked. A spec-compliant HTML parser will not parse this link, so any parser that does and visits it is categorically in the wrong.

The following configuration options are supported:

## Honeypot configuration
honeypot:
  ## If not set, Anubis will assume you meant `true`.
  enabled: true
  ## Currently the only supported method is the naive method.
  ## See https://anubis.techaro.lol/docs/admin/honeypot/overview#implementation-notes for more information
  implementation: naive

For more information about this feature, consult the Dataset Poisoning page.

See policy configuration for related topics.