# Bot detection maps. Empty deny lists = fully inert.
# Add an entry only for agents that can never be a real visitor.
# Rejected bots ($bad_agent) are a HINT passed to PHP via fastcgi_param
# (add `fastcgi_param BITRIX_BOT $bad_agent;` in the snippet if you use it);
# denied ones never reach PHP.

map $http_user_agent $bad_agent {
    default 0;
    #~*(semrush|ahrefs|mj12bot)   1;
}

map $http_user_agent $denied_agent {
    default 0;
    ~*YandexRenderResourcesBot   1;   # known page-render crawler storm
    #~*(other-bot-pattern)        1;
}

map $remote_addr $denied_ip {
    default 0;
    #203.0.113.66  1;
    #198.51.100.0/24 1;
}

map $http_referer $bad_referer {
    default 0;
}