From 5f5864818822bb354083ffd22ad2b344e4abdde2 Mon Sep 17 00:00:00 2001
From: Marcus Kammer <marcus.kammer@mailbox.org>
Date: Wed, 1 Nov 2023 09:29:07 +0100
Subject: [PATCH] Write file block_openai.sh

---
 sbcl-nginx.yml | 20 ++++++++++++++++++++
 1 file changed, 20 insertions(+)

diff --git a/sbcl-nginx.yml b/sbcl-nginx.yml
index edacad7..5cc89db 100644
--- a/sbcl-nginx.yml
+++ b/sbcl-nginx.yml
@@ -313,6 +313,26 @@ write_files:
       curl https://git.sr.ht/~marcuskammer/cloudinit/blob/main/.sbclrc -o /home/marcus/.sbclrc && chown marcus:marcus /home/marcus/.sbclrc
       sbcl --non-interactive --eval "(ql:quickload '(:hunchentoot :spinneret :dexador :rove :vecto :woo :clsql-sqlite3))" --quit
 
+  - path: /home/marcus/block_openai.sh
+    owner: 'marcus:marcus'
+    permissions: '0755'
+    defer: True
+    content: |
+      #!/bin/bash
+      # Purpose: Block OpenAI ChatGPT bot CIDR
+      # Tested on: Debian and Ubuntu Linux
+      # Author: Vivek Gite {https://www.cyberciti.biz} under GPL v2.x+
+      # ------------------------------------------------------------------
+      file="/tmp/out.txt.$$"
+      wget -q -O "$file" https://openai.com/gptbot-ranges.txt 2>/dev/null
+
+      while IFS= read -r cidr
+      do
+          sudo ufw deny proto tcp from $cidr to any port 80
+          sudo ufw deny proto tcp from $cidr to any port 443
+      done < "$file"
+      [ -f "$file" ] && rm -f "$file"
+
   - path: /home/marcus/setup_user_all.sh
     owner: 'marcus:marcus'
     permissions: '0755'