Configurable response type for main route

project/config.py

@@ -45,6 +45,13 @@
 ### If the following option is set to True, then no passwords will be logged at all. (Default: True)
 DONT_LOG_PASSWORDS = True
 
+### Configure the main catch-all route to return either an HTML page, 
+### the client IP, or just a 200 status code.
+### Returning only the client IP or status code may reduce being quickly fingerprinted
+### as an instance of this honeypot, at least if no application routes are requested.
+### Values: 1 = HTML page (default), 2 = IP, 3 = Status code
+INDEX_RESPONSE_TYPE = 1
+
 ################################################
 ### Database URI examples for various database systems. Default: SQLite (/honeypot/instance/db.sqlite)
 ### Uncomment/configure one if using something else. Users db only.

project/main.py

@@ -333,18 +333,25 @@ def closeConnection(response):
             conn.commit()
         conn.close()
 
-        #Clear the cache so this request can appear on main.stats
+        # Clear the cache so this request can appear on main.stats
         cache.clear()
 
+        # Calculate and log run time
         t2 = time.perf_counter()
         time_to_run = t2 - t1
-        logging.debug(f'TIME: {time_to_run}')
+        logging.debug(f'RUN TIME: {time_to_run}')
         #logging.debug(response.status) #For testing
         return response
 
-    #return jsonify(req_ip)
-    flash(f'IP: {req_ip}', 'info')
-    return render_template('index.html')
+    # Decide what to return, based on config. (Configure in config.py)
+    match current_app.config.get('INDEX_RESPONSE_TYPE'):
+        case 1: # HTML page
+            flash(f'IP: {req_ip}', 'info')
+            return render_template('index.html')
+        case 2: # Client IP
+            return jsonify(req_ip)
+        case 3 | _: # Only status code
+            return ('', 200)
 
 ### STATS ROUTES