From a75995e23811c2aa95f5ec361c2edb550157cb6f Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?J=C3=B6rg=20Thalheim?= <joerg@thalheim.io>
Date: Sun, 16 Jun 2024 17:06:23 +0200
Subject: [PATCH] mediawiki: enable dns blacklists

---
 modules/nixos-wiki/default.nix | 12 +++++++-----
 1 file changed, 7 insertions(+), 5 deletions(-)

diff --git a/modules/nixos-wiki/default.nix b/modules/nixos-wiki/default.nix
index 3e0af5b..99c231d 100644
--- a/modules/nixos-wiki/default.nix
+++ b/modules/nixos-wiki/default.nix
@@ -107,11 +107,13 @@ in
           'icon' => '/nixos.png',
         ];
 
-        # Combat SPAM with IP-Blocklists (StopForumSpam extension)
-        #$wgEnableDnsBlacklist = true;
-        #$wgDnsBlacklistUrls = array(
-        #  'dnsbl.dronebl.org'
-        #);
+        # Combat SPAM with IP-Blocklists
+        # https://www.mediawiki.org/wiki/Manual:Combating_spam#Honeypots,_DNS_BLs_and_HTTP_BLs
+        $wgEnableDnsBlacklist = true;
+        $wgDnsBlacklistUrls = array(
+          'xbl.spamhaus.org',
+          'opm.tornevall.org'
+        );
 
         # required for fancy VisualEditor extension
         $wgGroupPermissions['user']['writeapi'] = true;