Caddyfile Configuration

defender <responder> {
    ranges <cidr_or_predefined...>
    whitelist <ip_addresses...>
    message <custom_message>
    status_code <http_status_code>
    url <redirect_url>
    serve_ignore
    tarpit_config {
        headers {
            <header_name> <header_value>
        }
        content <protocol>://<path>
        timeout <duration>
        bytes_per_second <integer>
        response_code <http_status_code>
    }
}

defender block {
    ranges openai aws 192.168.1.0/24
}

defender block {
    ranges openai
    whitelist 203.0.113.5 198.51.100.42
}

defender custom {
    ranges openai aws
    message "Please contact support for API access"
}

defender custom {
    ranges vpn
    message "You don't have permission to access this page"
    status_code 403
}

defender redirect {
    ranges openai
    url https://example.com/blocked
}

defender block {
    ranges openai aws
    serve_ignore
}

defender tarpit {
    ranges openai
    tarpit_config {
        headers {
            Content-Type text/html
            X-Custom-Header custom-value
        }
    }
}

defender tarpit {
    ranges aws
    tarpit_config {
        content file:///var/www/tarpit.html
    }
}

defender tarpit {
    ranges gcloud
    tarpit_config {
        content https://example.com/large-file.bin
    }
}

defender tarpit {
    ranges openai
    tarpit_config {
        timeout 2m
    }
}

defender tarpit {
    ranges aws gcloud
    tarpit_config {
        bytes_per_second 50
        timeout 1m
    }
}

defender tarpit {
    ranges openai
    tarpit_config {
        response_code 200
        content file:///var/www/tarpit.html
    }
}

example.com {
    defender block {
        ranges openai aws
    }
    respond "Hello World"
}

example.com {
    defender custom {
        ranges openai aws deepseek
        message "You don't have permission to access this page"
        status_code 403
    }
    respond "Hello World"
}

example.com {
    defender tarpit {
        ranges openai aws gcloud
        tarpit_config {
            headers {
                Content-Type text/html
            }
            content file:///var/www/tarpit.html
            timeout 2m
            bytes_per_second 30
            response_code 200
        }
    }
    respond "Hello World"
}

example.com {
    defender redirect {
        ranges vpn tor
        whitelist 203.0.113.5
        url https://example.com/blocked
    }
    respond "Hello World"
}

example.com {
    # Rate limit known AI services
    defender ratelimit {
        ranges openai deepseek
    }
    
    # Block known bad actors
    defender block {
        ranges 192.168.1.0/24 10.0.0.0/8
    }
    
    # Tarpit everything else from cloud providers
    defender tarpit {
        ranges aws gcloud azurepubliccloud
        tarpit_config {
            timeout 5m
            bytes_per_second 20
        }
    }
    
    respond "Hello World"
}

example.com {
    defender block {
        ranges openai aws gcloud
        serve_ignore
    }
    respond "Hello World"
}