Details

• Runs bare-metal (NOT Docker)
• Caddyfile location: /etc/caddy/Caddyfile
• TLS: caddy-dns/cloudflare plugin, ACME DNS challenge, wildcard cert for *.buckstabu.dev
• robots.txt: noindex on all public domains
• Logs: /var/log/caddy/access.log (used by CrowdSec)

Snippets

(block_ai_bots) {
  @bots {
    header User-Agent *ClaudeBot*
    header User-Agent *GPTBot*
  }
  respond @bots 403
}

Useful Commands

$sudo systemctl reload caddy

$sudo journalctl -u caddy -f