From 3bf70c5c6d51ecdc9fc3671b483c00cf3a90ceb4 Mon Sep 17 00:00:00 2001
From: Arun Isaac
Date: Mon, 3 Aug 2026 02:03:47 +0100
Subject: nginx: Add Anubis protection.

---
 doc/forge.skb | 11 +++++++++++
 1 file changed, 11 insertions(+)

(limited to 'doc')

diff --git a/doc/forge.skb b/doc/forge.skb
index 986b7d7..4f184ae 100644
--- a/doc/forge.skb
+++ b/doc/forge.skb
@@ -418,6 +418,17 @@ cannot be found, nginx will send the list of files in the directory.])
          (record-field "try-files"
            [List of files whose existence is checked in the specified order.
 nginx will use the first file it finds to process the request.])
+         (record-field "anubis?"
+           [If ,(code [#t]), ,(ref :url
+"https://anubis.techaro.lol/docs/admin/configuration/subrequest-auth/" :text
+"Anubis subrequest authentication") locations are added to the server
+configuration. These are namely a ,(samp "/.within.website/") location and a
+,(samp "@redirectToAnubis") location. Locations to be protected by Anubis should
+specify ,(code "auth_request /.within.website/x/cmd/anubis/api/check; error_page
+401 = @redirectToAnubis;"). To use this feature, ,(code [nginx-service-type])
+must be configured with an nginx compiled with ,(samp
+[--with-http_auth_request_module]). The ,(code [nginx-with-auth-request])
+package is provided as a convenience for this purpose.])
          (record-field "raw-content"
            [List of strings or file-like objects to be appended to the server
 block. Each item is prefixed with indentation and suffixed with a new line.
-- 
cgit 1.4.1