Firewall Rules

Firewall block rules live under firewall_rules::

firewall_rules:
  no-dotenv:
    block: { path: /.env }
  no-trace:
    block: { method: TRACE, equals: true }
  scanner:
    block: { header: User-Agent, value: sqlmap }

A match names exactly one of path, query, header, or method. Path, query, and method carry their value inline. Header matches put the header name in header and the pattern in value.

Matches are substring matches unless equals: true is set.