<?xml version='1.0' encoding='utf-8'?>
<rss version="2.0"><channel><title>noarch GetPageSpeed extras repository for Amazon Linux 2023</title><link>https://extras.getpagespeed.com/amzn/2023/early/noarch/repoview/latest-feed.xml</link><description>Latest packages for noarch GetPageSpeed extras repository for Amazon Linux 2023</description><lastBuildDate>Sat, 31 Oct 2026 19:15:26 +0000</lastBuildDate><generator>Repoview-2.5.0</generator><item><guid isPermaLink="false">https://extras.getpagespeed.com/amzn/2023/early/noarch/repoview/nginx-honeypot.html+0:1.2.0-1.amzn2023.noarch</guid><link>https://extras.getpagespeed.com/amzn/2023/early/noarch/repoview/nginx-honeypot.html</link><pubDate>Sat, 31 Oct 2026 19:09:53 +0000</pubDate><title>Update: nginx-honeypot-1.2.0-1.amzn2023</title><description>&lt;div&gt;
	&lt;p&gt;
		&lt;strong&gt;Package:&lt;/strong&gt; nginx-honeypot&lt;br/&gt;
		&lt;strong&gt;Summary:&lt;/strong&gt; NGINX honeypot - detect malicious bots (and optionally firewall-ban them)
	&lt;/p&gt;
	&lt;p&gt;
		&lt;strong&gt;Description:&lt;/strong&gt;&lt;br/&gt;
		NGINX honeypot with lots of "honey" for bad bots. A map of bot-bait request
URIs (phpMyAdmin probes, .env grabs, exploit paths) makes NGINX return 410 Gone,
cutting server load and log noise. The package is config-only and needs nothing
but nginx.

Banning the offending IP is optional and opt-in: a free fcgiwrap + ipset path,
and a Pro path that bans from one directive via nginx-module-nftset-access.
Both are documented in the README.
	&lt;/p&gt;
	&lt;h3&gt;Changes:&lt;/h3&gt;
	&lt;table cellpadding="4" cellspacing="0"&gt;
        &lt;tr&gt;
            &lt;td valign="top"&gt;&lt;a href="https://extras.getpagespeed.com/amzn/2023/early/noarch/RPMS/nginx-honeypot-1.2.0-1.amzn2023.noarch.rpm"
              &gt;nginx-honeypot-1.2.0-1.amzn2023.noarch&lt;/a&gt;
              [22 KiB]&lt;/td&gt;
            &lt;td valign="top"&gt;
              &lt;strong&gt;Changelog&lt;/strong&gt;
              by &lt;span&gt;Danila Vershinin (2026-10-31)&lt;/span&gt;:
              &lt;pre&gt;- Network mode: server-ban-nftset-network.conf logs trap hits as JSON, and the
  optional nginx-honeypot-report timer ships them to a central server.
- honey.conf: stop matching /.well-known/ paths, dot-paths in query strings and
  /actuator/health, which banned ACME validators and monitors.&lt;/pre&gt;
            &lt;/td&gt;
        &lt;/tr&gt;
    &lt;/table&gt;
&lt;/div&gt;
</description></item></channel></rss>