This is my custom configuration from C0nw0nk's Nginx Anti DDoS Script (https://github.com/C0nw0nk/Nginx-Lua-Anti-DDoS). It gives a PoW (Proof of Work) JS authentication puzzle to the browser, which the client has to solve. Once a user successfully solves the challenge, they are given an authentication cookie to access the website.