add filters to avoid allow curl, wget, and some scrapers

.env.sample

@@ -7,15 +7,21 @@ LETS_ENCRYPT_ENV=production
 FOURGET_SERVER_NAME=4get.example.com
 FOURGET_SHORT_DESCRIPTION="4get 4get 4get 4get"
 
+DEFAULT_THEME="Dark" # Options: "Catppuccin Latte" "Dark Christmas" "Wine" "Catppuccin Mocha" "Gore's shitty theme" "gentoo" "Cream" "White Christmas"
+
 ## uncomment to customize the instance list
 #FOURGET_INSTANCES=https://4get.ca
 
 ## Enable captcha protection, please see readme.
 #COMPOSE_FILE="$COMPOSE_FILE:compose.captcha.yml"
+## Your list of datasets and the number of images in each
+#CAPTCHA_DATASET="['birds', 2263],['fumo_plushies', 1006],['minecraft', 848]"
+#MAX_SEARCHES= # Max number of searches a user can complete before being asked to solve another captcha
 
 ## Enable onion routing, this will make all searches using tor
 #COMPOSE_FILE="$COMPOSE_FILE:compose.tor.yml"
 
 INCLUDE_NEWS_LINK=false
 INCLUDE_4GET_DONATION_LINK=true
-INCLUDE_SOURCE_LINK=false
+INCLUDE_SOURCE_LINK=false
+API_ENABLED=false

README.md

@@ -29,7 +29,7 @@
 
 4get does not support corporate captcha providers (ie. reCaptcha, hCaptcha, etc.) instead it employs a very simple image captcha based on user provided images. Images must be png, 100x100 in size, and named in order (ie. 1.png, 2.png, 3.png, etc.)
 
-Images are placed in a directory with a name of the person, place, or thing the user is expected to select. Provide 4get with images that match as well as some that do not. go to `https://4get.ca/web?s=test` with no cookies for some examples
+Images are placed in a directory with a name of the person, place, or thing the user is expected to select. Provide 4get only with images that match the folder name. go to `https://4get.ca/web?s=test` for some examples
 
 example directory structure:
 

compose.tor.yml

@@ -35,6 +35,8 @@ services:
         target: /var/www/html/4get/data/proxies/onion.txt
   tor:
     image: luuul/tor:latest
+    networks:
+      - internal
 
 configs:
   onion_txt:

compose.yml

@@ -6,6 +6,9 @@ services:
     image: luuul/4get:1.0.21
     environment:
       - FOURGET_PROTO=http
+      - DISALLOWED_SSL=TLS_AES_256_GCM_SHA384
+      - FILTERED_HEADER_KEYS=x-forwarded-for,x-cluster-client-ip,x-client-ip,x-real-ip,client-ip,real-ip,forwarded-for,forwarded-for-ip,forwarded,proxy-connection,remote-addr,via
+
     networks:
       - proxy
     deploy: