feat: anubis support

.env.sample

@@ -95,3 +95,6 @@ SECRET_ADMIN_PASSWORD_VERSION=v1
 #COMPOSE_FILE="$COMPOSE_FILE:compose.ftp-2223.yml"
 #COMPOSE_FILE="$COMPOSE_FILE:compose.ftp-2224.yml"
 #COMPOSE_FILE="$COMPOSE_FILE:compose.ftp-2225.yml"
+
+# Anubis
+#COMPOSE_FILE="$COMPOSE_FILE:compose.anubis.yml"

README.md

@@ -103,3 +103,9 @@ Make a `.tar.gz` backup of the site's `wp-content` dir and a `.sql.gz` backup of
 
 Lastly, if there's a domain name change, run a search and replace:
 `abra app wp.example.com wp "search-replace https://old.example.com https://wp.example.com"`
+
+## Protect Wordpress from scrapers with Anubis
+
+Uncomment the Anubis compose file from the `.env` file and re-deploy the
+app.  Don't forget to actually [enable Anubis on the Traefik app
+too](https://recipes.coopcloud.tech/traefik)!

compose.anubis.yml

@@ -0,0 +1,7 @@
+---
+version: "3.8"
+services:
+  app:
+    deploy:
+      labels:
+      - "traefik.http.routers.${STACK_NAME}.middlewares=${STACK_NAME}-redirectscheme,${STACK_NAME}-redirecthostname,anubis"

compose.yml

@@ -3,7 +3,7 @@ version: "3.8"
 
 services:
   app:
-    image: "wordpress:7.1.2"
+    image: "wordpress:7.0.4"
     volumes:
       - "wordpress_content:/var/www/html/wp-content/"
     networks:
@@ -63,10 +63,10 @@ services:
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.replacement=https://${DOMAIN}/$${2}"
         - "traefik.http.middlewares.${STACK_NAME}-redirect.redirectregex.permanent=true"
         - "coop-cloud.${STACK_NAME}.timeout=${TIMEOUT}"
-        - "coop-cloud.${STACK_NAME}.version=4.1.0+7.1.2"
+        - "coop-cloud.${STACK_NAME}.version=4.0.0+7.0.4"
 
   db:
-    image: "mariadb:13.0"
+    image: "mariadb:12.3"
     volumes:
       - "mariadb:/var/lib/mysql"
     networks:

release/4.1.0+7.1.2

@@ -1 +0,0 @@
-Fixes https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-7hp8-65ch-5whp