we now finally have ModSecurity as a WAF for transfur.social. hopefully this helps me filter out automated spam way easier than the limited tools cloudflare gives us.
Bonus upside being able to do json-aware body text filtering for unacceptable content like CSAM hashtags and bigotry, which was previously done with a patch from fedibird that was rather flaky and sometimes just leaked stuff through for no discernible reason.
modsecurity.org/