Security

Configure Cloudflare Turnstile to enable bot protection

Turnstile is a privacy-friendly, CAPTCHA solution that protects your application from bots and abuse.

Create account

Configure widget

Go to Application security > Turnstile and add a new widget.

Add a name and your hostname.

Select the widget Mode:

ManagedCloudflare will use information from the visitor to decide if an interactive challenge should be used. If we do show an interaction, the user will be prompted to check a box (no images or text to decipher).

Non-interactiveA purely non-interactive challenge. Users will see a widget with a loading bar while the browser challenge is run.

InvisibleInvisible challenge that does not require interaction.

Select pre-clearance and choose the level:

InteractiveAllows a user with to not be challenged by Interactive, Managed or JavaScript Challenge Firewall Rules

ManagedAllows a user to not be challenged by Managed Challenge or JavaScript Challenge Firewall Rules

Non-interactiveAllows a user to not be challenged by JavaScript Challenge Firewall Rules.

Copy your site key and secret key

Add to local env

Add the following to your .env file:

/apps/fastack-boilerplate/.env

Optional

NEXT_PUBLIC_TURNSTILE_SITE_KEY=your-site-key-here
TURNSTILE_SECRET_KEY=your-secret-key-here
NEXT_PUBLIC_DISABLE_CAPTCHA=false

Add to production env

Add the following to your .env.production file:

/apps/fastack-boilerplate/.env.production

Optional

NEXT_PUBLIC_TURNSTILE_SITE_KEY=your-site-key-here
TURNSTILE_SECRET_KEY=your-secret-key-here
NEXT_PUBLIC_DISABLE_CAPTCHA=false