diff --git a/content/posts/drafts/anubis/Caddyfile b/content/posts/drafts/anubis/Caddyfile
new file mode 100644
index 0000000..3bd0ef0
--- /dev/null
+++ b/content/posts/drafts/anubis/Caddyfile
@@ -0,0 +1,15 @@
+:8080
+
+forward_auth 127.0.0.1:8923 {
+    uri /.within.website/x/cmd/anubis/api/check
+    trusted_proxies private_ranges
+    @unauthorized status 401
+    handle_response @unauthorized {
+            redir * /.within.website/?redir={uri} 307
+    }
+    header_up X-Real-Ip {remote_host}
+    header_up X-Http-Version {http.request.proto}
+}
+file_server {
+    root cc_static_autobuilt
+}
\ No newline at end of file
diff --git a/content/posts/drafts/anubis/anubis.yml b/content/posts/drafts/anubis/anubis.yml
new file mode 100644
index 0000000..0f424dd
--- /dev/null
+++ b/content/posts/drafts/anubis/anubis.yml
@@ -0,0 +1,7 @@
+# POLICY_FNAME=anubis.yaml TARGET=" " anubis
+
+bots:
+  - import: (data)/meta/default-config.yaml
+  - name: allow-telegraf
+    action: ALLOW
+    user_agent_regex: Telegraf