The title says it. This PR adds documentation for setting up anubis in front of an mbin instance with rules to still allow unchallenged use of the API, the RSS feed and ActivityPub as a whole via allow rules.

Like they state on their website:

Anubis is a bit of a nuclear response. This will result in your website being blocked from smaller scrapers and may inhibit "good bots" like the Internet Archive. You can configure bot policy definitions to explicitly allowlist them and we are working on a curated set of "known good" bots to allow for a compromise between discoverability and uptime.

It is still a better alternative to just shutting down anonymous access like I (and a few others) did.