From e406f0a4d2e7d4997a074711bdf82ef3a6923194 Mon Sep 17 00:00:00 2001
From: Joseph Hanson <joe@veri.dev>
Date: Wed, 11 Oct 2023 12:52:04 -0500
Subject: [PATCH] Updating some ingress-nginx settings.

---
 kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml
index 60c4754..f0c2a0a 100644
--- a/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml
+++ b/kubernetes/apps/network/ingress-nginx/app/helmrelease.yaml
@@ -19,6 +19,7 @@ spec:
       replicaCount: 3
       updateStrategy:
         type: RollingUpdate
+      allowSnippetAnnotations: true
       service:
         enabled: true
         type: LoadBalancer
@@ -46,12 +47,15 @@ spec:
         default: true
 
       config:
+        block-user-agents: "GPTBot,~*GPTBot*,ChatGPT-User,~*ChatGPT-User*,Google-Extended,~*Google-Extended*,CCBot,~*CCBot*,Omgilibot,~*Omgilibot*,FacebookBot,~*FacebookBot*" # taken from https://github.com/superseriousbusiness/gotosocial/blob/main/internal/web/robots.go
         client-header-timeout: 120
         client-body-buffer-size: "100M"
         client-body-timeout: 120
         enable-brotli: "true"
+        enable-ocsp: "true"
         enable-real-ip: "true"
         use-proxy-protocol: "true"
+        hide-headers: Server,X-Powered-By
         hsts-max-age: "31449600"
         keep-alive: 120
         keep-alive-requests: 10000