From 53a6ce24f3c0a087af54b895efdb8b6d2a445c3f Mon Sep 17 00:00:00 2001
From: Kevin Fenzi <kevin@scrye.com>
Date: Tue, 10 Feb 2026 08:26:42 -0800
Subject: [PATCH] anubis: switch this to just allowing CloudFront

Signed-off-by: Kevin Fenzi <kevin@scrye.com>
---
 roles/anubis-el/files/botPolicy.yaml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/roles/anubis-el/files/botPolicy.yaml b/roles/anubis-el/files/botPolicy.yaml
index 1ab6767327..5d4ec8a749 100644
--- a/roles/anubis-el/files/botPolicy.yaml
+++ b/roles/anubis-el/files/botPolicy.yaml
@@ -12,8 +12,8 @@ bots:
     weight:
       adjust: 20
     path_regex: ^/fork/
-  - name: repodata
-    path_regex: '.*repodata/.*'
+  - name: cloudfront
+    user_agent_regex: "Amazon CloudFront"
     action: ALLOW
   # allow Pagure attachment files (referenced from Fedora Forge)
   - name: pagure attachment files