wazum

Block AI crawlers in nginx

update-ai-blocklist.sh fetches the officially published IP ranges of AI crawlers (OpenAI GPTBot, OAI-SearchBot, ChatGPT-User, PerplexityBot, Perplexity-User) and renders them into an nginx geo map that sets $ai_blocked_ip to 1 for matching client IPs.

It validates every prefix as CIDR, dedupes across vendors, refuses suspiciously short lists, installs atomically, checks the result with nginx -t (rolls back to the previous list on failure) and reloads nginx only when the list actually changed — so it is safe to run from cron.

wazum

#!/bin/bash

PREFIX="[SOMETHING]"
# Add commit hashes from newest to oldest (oldest at the end).
COMMITS=(
  90f94f6174d9efe74d5f63a53049a063124bdff8
  eb17a70cf18ea6662c045b95ac5ba6a36640b30c
  91026eec2b324e6999b07fc24071fa0e55dd2795
  411df442fbe4860f6b25fc41d8a4fc64190a95fa
  1f5cf10b34fc67677f00fe7850730bdfe38c1ff9

wazum

<?php
…
class MyBatchHandler implements BatchHandlerInterface
{
    use BatchHandlerTrait;

    public function __invoke(MyMessage $message, Acknowledger $ack = null)
    {
        return $this->handle($message, $ack);
    }

wazum

<?php
…
        $documents = [];
        foreach ($jobs as [$job, $ack]) {          
            try {
                $documents[] = $this->solrService->createDocument($job->something());
                $ack->ack($job);
            } catch (\Exception $e) {
                $ack->nack($e);
            }

wazum

<?php

…
/** @var AckStamp $ackStamp */
if ($batchHandler && $ackStamp = $envelope->last(AckStamp::class)) {
    $ack = new Acknowledger(get_debug_type($batchHandler), static function (\Throwable $e = null, $result = null) use ($envelope, $ackStamp, $handlerDescriptor) {
        if (null !== $e) {
            $e = new HandlerFailedException($envelope, [$e]);
        } else {
            $envelope = $envelope->with(HandledStamp::fromDescriptor($handlerDescriptor, $result));

wazum

<?php

declare(strict_types=1);

namespace App\Something\Infrastructure\Doctrine\EventSubscriber;

use App\Something\Domain\Contracts\ContainsNullableEmbeddable;
use App\Something\Domain\Contracts\NullableEmbeddable as NullableEmbeddableInterface;
use Doctrine\Common\EventSubscriber;
use Doctrine\ORM\Event\LifecycleEventArgs;

wazum

<?php

declare(strict_types=1);

namespace App\Something\Domain\Entity;

/**
 * @ORM\Entity
 */
class Person extends DomainEntity implements ContainsNullableEmbeddable

wazum

<?php

declare(strict_types=1);

namespace App\Something\Domain\ValueObject;

use Webmozart\Assert\Assert;

/**
 * @Embeddable

wazum

<?php

declare(strict_types=1);

namespace App\Something\Domain\Contracts;

interface ContainsNullableEmbeddable
{
}

wazum

<?php

declare(strict_types=1);

namespace App\Something\Domain\Contracts;

interface NullableEmbeddable
{
}