Enable and configure Honeypot

config/sync/config_snapshot.snapshot.config_sync.module.honeypot.yml

@@ -0,0 +1,95 @@
+uuid: 2eacb366-8029-47cf-98af-df5c63666489
+langcode: en
+status: true
+dependencies:
+  module:
+    - honeypot
+id: config_sync.module.honeypot
+snapshotSet: config_sync
+extensionType: module
+extensionName: honeypot
+items:
+  -
+    collection: ''
+    name: honeypot.settings
+    data:
+      unprotected_forms:
+        - user_login_form
+        - search_form
+        - search_block_form
+        - views_exposed_form
+        - honeypot_settings_form
+      protect_all_forms: false
+      log: false
+      element_name: url
+      time_limit: 5
+      expire: 300
+      form_settings:
+        user_register_form: false
+        user_pass: false
+        feedback_contact_message_form: false
+        _contact_message_form: false
+  -
+    collection: ''
+    name: tour.tour.honeypot
+    data:
+      id: honeypot
+      module: honeypot
+      label: Honeypot
+      langcode: en
+      routes:
+        -
+          route_name: honeypot.config
+      tips:
+        honeypot-configuration:
+          id: honeypot-configuration
+          plugin: text
+          label: Honeypot
+          weight: -10
+          body: "Congratulations on installing Honeypot on your site! With just a few clicks, you can have your site well-protected against automated spam bots.\r\n\r\nClick Next to be guided through this configuration page."
+          location: top
+        protect-all-forms:
+          id: protect-all-forms
+          plugin: text
+          label: 'Protect all forms'
+          weight: -9
+          attributes:
+            data-id: edit-protect-all-forms
+          body: "Protecting all the forms is the easiest way to quickly cut down on spam on your site, but doing this disables Drupal's caching for every page where a form is displayed.\r\n\r\nNote: If you have the honeypot time limit enabled, this option may cause issues with Drupal Commerce product forms or similarly-sparse forms that are able to be completed in a very short time."
+          location: bottom
+        log-blocked-form-submissions:
+          id: log-blocked-form-submissions
+          plugin: text
+          label: 'Log blocked form submissions'
+          weight: -8
+          attributes:
+            data-id: edit-log
+          body: 'Check this box to log every form submission using watchdog. If you have Database Logging enabled, you can view these log entries in the Recent log messages page under Reports.'
+          location: bottom
+        honeypot-element-name:
+          id: honeypot-element-name
+          plugin: text
+          label: 'Honeypot Element Name'
+          weight: -7
+          attributes:
+            data-id: edit-element-name
+          body: 'Spam bots typically fill out any field they believe will help get links back to their site, so tempting them with a field named something like ''url'', ''homepage'', or ''link'' makes it hard for them to resist filling in the field—and easy to catch them in the trap and reject their submissions!'
+          location: top
+        honeypot-time-limit:
+          id: honeypot-time-limit
+          plugin: text
+          label: 'Honeypot Time Limit'
+          weight: -6
+          attributes:
+            data-id: edit-time-limit
+          body: 'If you enter a positive value, Honeypot will require that all protected forms take at least that many seconds long to fill out. Most forms take at least 5-10 seconds to complete (if you''re a human), so setting this to a value < 5 will help protect against spam bots. Set to 0 to disable.'
+          location: top
+        honeypot-form-specific-settings:
+          id: honeypot-form-specific-settings
+          plugin: text
+          label: 'Honeypot form-specific settings'
+          weight: -5
+          attributes:
+            data-id: edit-form-settings
+          body: 'If you would like to choose particular forms to be protected by Honeypot, check the forms you wish to protect in this section. Most common types of forms are available for protection.'
+          location: top

config/sync/core.extension.yml

@@ -77,6 +77,7 @@ module:
   hal: 0
   help: 0
   history: 0
+  honeypot: 0
   http_client_error_status: 0
   image: 0
   indieweb: 0

config/sync/honeypot.settings.yml

@@ -0,0 +1,29 @@
+unprotected_forms:
+  - user_login_form
+  - search_form
+  - search_block_form
+  - views_exposed_form
+  - honeypot_settings_form
+protect_all_forms: true
+log: false
+element_name: url
+time_limit: 5
+expire: 300
+form_settings:
+  user_register_form: false
+  user_pass: false
+  contact_message_feedback_form: false
+  contact_message_personal_form: false
+  node_action_form: false
+  node_article_form: false
+  node_blog_form: false
+  node_campaign_form: false
+  node_case_study_form: false
+  node_event_form: false
+  node_landing_page_form: false
+  node_page_form: false
+  node_people_form: false
+  node_resource_form: false
+  comment_comment_form: false
+_core:
+  default_config_hash: 9bVDfWSa_In6VzTXmy04jJ_3ZQobihKjO9isuuUCPaw

config/sync/tour.tour.honeypot.yml

@@ -0,0 +1,67 @@
+uuid: 60485796-06b7-4b61-bcf3-8f021058b5b6
+langcode: en
+status: true
+dependencies:
+  module:
+    - honeypot
+_core:
+  default_config_hash: eJszwZawaWU6LHIgSykn-OsisG3smruwsKOqx44TUoA
+id: honeypot
+label: Honeypot
+module: honeypot
+routes:
+  -
+    route_name: honeypot.config
+tips:
+  honeypot-configuration:
+    id: honeypot-configuration
+    plugin: text
+    label: Honeypot
+    weight: -10
+    body: "Congratulations on installing Honeypot on your site! With just a few clicks, you can have your site well-protected against automated spam bots.\r\n\r\nClick Next to be guided through this configuration page."
+    location: top
+  protect-all-forms:
+    id: protect-all-forms
+    plugin: text
+    label: 'Protect all forms'
+    weight: -9
+    attributes:
+      data-id: edit-protect-all-forms
+    body: "Protecting all the forms is the easiest way to quickly cut down on spam on your site, but doing this disables Drupal's caching for every page where a form is displayed.\r\n\r\nNote: If you have the honeypot time limit enabled, this option may cause issues with Drupal Commerce product forms or similarly-sparse forms that are able to be completed in a very short time."
+    location: bottom
+  log-blocked-form-submissions:
+    id: log-blocked-form-submissions
+    plugin: text
+    label: 'Log blocked form submissions'
+    weight: -8
+    attributes:
+      data-id: edit-log
+    body: 'Check this box to log every form submission using watchdog. If you have Database Logging enabled, you can view these log entries in the Recent log messages page under Reports.'
+    location: bottom
+  honeypot-element-name:
+    id: honeypot-element-name
+    plugin: text
+    label: 'Honeypot Element Name'
+    weight: -7
+    attributes:
+      data-id: edit-element-name
+    body: 'Spam bots typically fill out any field they believe will help get links back to their site, so tempting them with a field named something like ''url'', ''homepage'', or ''link'' makes it hard for them to resist filling in the field—and easy to catch them in the trap and reject their submissions!'
+    location: top
+  honeypot-time-limit:
+    id: honeypot-time-limit
+    plugin: text
+    label: 'Honeypot Time Limit'
+    weight: -6
+    attributes:
+      data-id: edit-time-limit
+    body: 'If you enter a positive value, Honeypot will require that all protected forms take at least that many seconds long to fill out. Most forms take at least 5-10 seconds to complete (if you''re a human), so setting this to a value < 5 will help protect against spam bots. Set to 0 to disable.'
+    location: top
+  honeypot-form-specific-settings:
+    id: honeypot-form-specific-settings
+    plugin: text
+    label: 'Honeypot form-specific settings'
+    weight: -5
+    attributes:
+      data-id: edit-form-settings
+    body: 'If you would like to choose particular forms to be protected by Honeypot, check the forms you wish to protect in this section. Most common types of forms are available for protection.'
+    location: top