Self-hosted bot challenge for stock nginx, or a gateway container in front of any HTTP server. Proof-of-work first, behavioral CAPTCHA when suspicious; search and AI crawlers pass, verified by IP range. RPM/DEB/APK + Docker.
docker nginx golang security captcha apache self-hosted web-security anti-bot bot-detection proof-of-work nginx-module bot-management bot-protection ja4 tls-fingerprinting nginx-dynamic-module
-
Updated
Nov 11, 2026 - Go