ext_conf_template.txt

# cat=connection//10; type=string; label=Site key: The axr_site_... key for the website surface you registered in AxioRank. For secret hygiene, prefer the AXIORANK_SITE_KEY environment constant (or a per-site value) over storing it here.
siteKey =

# cat=connection//20; type=string; label=Base URL: Your AxioRank base URL. Leave as is unless you run a dedicated region.
baseUrl = https://app.axiorank.com

# cat=connection//30; type=options[Monitor=monitor,Enforce=enforce]; label=Mode: Monitor logs every verdict without blocking anything. Enforce blocks unverified agents, but only when your AxioRank surface is also in enforce posture.
posture = monitor

# cat=connection//40; type=int+; label=Timeout (ms): How long to wait for AxioRank before failing open. Verification sits in the request path, so keep this low.
timeoutMs = 1000

# cat=scope//10; type=boolean; label=Verify backend and login: requests to /typo3 and the backend login. An admin's own browser is never a bot, so only signed or bot-like requests here call out.
scopeBackend = 1

# cat=scope//20; type=boolean; label=Verify JSON page types: requests carrying a numeric type parameter, the usual shape of a headless or AJAX JSON endpoint.
scopeJson = 1

# cat=scope//30; type=boolean; label=Verify search: Indexed Search and Apache Solr requests.
scopeSearch = 1

# cat=scope//40; type=boolean; label=Verify form submissions: posts from the Form framework (EXT:form).
scopeForms = 1

# cat=scope//50; type=boolean; label=Verify bot-like user agents: any request whose user agent looks like a crawler or AI agent, on any path.
scopeBotUa = 1