A Caddy Cert Expired Because systemd-resolved Was Selectively Broken

Caddy 证书过期，起因竟是 systemd-resolved 的选择性故障

Making sure you’re not a bot! Loading… You are seeing this because the administrator of this website has set up Anubis to protect the server against the scourge of AI companies aggressively scraping websites. This can and does cause downtime for the websites, which makes their resources inaccessible for everyone. 正在确认您不是机器人！加载中……您之所以看到此页面，是因为本站管理员部署了 Anubis，旨在保护服务器免受 AI 公司激进抓取网站行为的侵害。这种抓取行为会导致网站宕机，进而使所有用户都无法访问相关资源。

Anubis is a compromise. Anubis uses a Proof-of-Work scheme in the vein of Hashcash, a proposed proof-of-work scheme for reducing email spam. The idea is that at individual scales the additional load is ignorable, but at mass scraper levels it adds up and makes scraping much more expensive. Anubis 是一种折中方案。它采用了一种类似于 Hashcash 的工作量证明（Proof-of-Work）机制，而 Hashcash 最初是为减少垃圾邮件而提出的。其核心理念是：对于个人用户而言，额外的负载可以忽略不计，但对于大规模抓取行为，这些负载会累积起来，从而大幅增加抓取成本。

Ultimately, this is a placeholder solution so that more time can be spent on fingerprinting and identifying headless browsers (EG: via how they do font rendering) so that the challenge proof of work page doesn’t need to be presented to users that are much more likely to be legitimate. 归根结底，这只是一个过渡性方案，目的是争取更多时间来研究如何通过指纹识别技术（例如通过字体渲染方式）来识别无头浏览器（headless browsers），从而避免向极有可能是正常用户的访问者展示工作量证明挑战页面。

Please note that Anubis requires the use of modern JavaScript features that plugins like JShelter will disable. Please disable JShelter or other such plugins for this domain. 请注意，Anubis 需要使用现代 JavaScript 特性，而 JShelter 等插件会禁用这些特性。请针对本域名禁用 JShelter 或此类插件。

Sadly, you must enable JavaScript to get past this challenge. This is required because AI companies have changed the social contract around how website hosting works. A no-JS solution is a work-in-progress. 遗憾的是，您必须启用 JavaScript 才能通过此项挑战。这是必要的，因为 AI 公司已经改变了网站托管的社会契约。目前，我们正在开发无需 JavaScript 的解决方案。