bunkerweb 1.4.0

confs/server-http/access-lua.conf

@@ -0,0 +1,63 @@
+access_by_lua_block {
+
+local logger	= require "logger"
+local datastore	= require "datastore"
+local plugins	= require "plugins"
+
+-- Don't process internal requests
+if ngx.req.is_internal() then
+	logger.log(ngx.INFO, "ACCESS", "Skipped access phase because request is internal")
+	return
+end
+
+logger.log(ngx.INFO, "ACCESS", "Access phase started")
+
+-- Process bans as soon as possible
+local banned, err = datastore:get("bans_ip_" .. ngx.var.remote_addr)
+if banned then
+	logger.log(ngx.WARN, "ACCESS", "IP " .. ngx.var.remote_addr .. " is banned with reason : " .. banned)
+	ngx.exit(ngx.HTTP_FORBIDDEN)
+end
+
+-- List all plugins
+local list, err = plugins:list()
+if not list then
+	logger.log(ngx.ERR, "ACCESS", "Can't list loaded plugins : " .. err)
+	list = {}
+end
+
+-- Call access method of plugins
+for i, plugin in ipairs(list) do
+	local ret, plugin_lua = pcall(require, plugin.id .. "/" .. plugin.id)
+	if ret then
+		local plugin_obj = plugin_lua.new()
+		if plugin_obj.access ~= nil then
+			logger.log(ngx.INFO, "ACCESS", "Executing access() of " .. plugin.id)
+			local ok, err, ret, value = plugin_obj:access()
+			if not ok then
+				logger.log(ngx.ERR, "ACCESS", "Error while calling access() on plugin " .. plugin.id .. " : " .. err)
+			else
+				logger.log(ngx.INFO, "ACCESS", "Return value from " .. plugin.id .. ".access() is : " .. err)
+			end
+			if ret then
+				if type(value) == "number" then
+					if value == ngx.HTTP_FORBIDDEN then
+						logger.log(ngx.WARN, "ACCESS", "Denied access from " .. plugin.id .. " : " .. err)
+						ngx.var.reason = plugin.id
+					else
+						logger.log(ngx.NOTICE, "ACCESS", plugin.id .. " returned status " .. tostring(value) .. " : " .. err)
+					end
+					return ngx.exit(value)
+				else
+					return value
+				end
+			end
+		else
+			logger.log(ngx.INFO, "ACCESS", "access() method not found in " .. plugin.id .. ", skipped execution")
+		end
+	end
+end
+
+logger.log(ngx.INFO, "ACCESS", "Access phase ended")
+
+}

confs/server-http/log-lua.conf

@@ -0,0 +1,44 @@
+log_by_lua_block {
+
+local utils		= require "utils"
+local logger	= require "logger"
+local datastore	= require "datastore"
+local plugins	= require "plugins"
+
+logger.log(ngx.INFO, "LOG", "Log phase started")
+
+-- List all plugins
+local list, err = plugins:list()
+if not list then
+	logger.log(ngx.ERR, "LOG", "Can't list loaded plugins : " .. err)
+	list = {}
+end
+
+-- Call log method of plugins
+for i, plugin in ipairs(list) do
+	local ret, plugin_lua = pcall(require, plugin.id .. "/" .. plugin.id)
+	if ret then
+		local plugin_obj = plugin_lua.new()
+		if plugin_obj.log ~= nil then
+			logger.log(ngx.INFO, "LOG", "Executing log() of " .. plugin.id)
+			local ok, err = plugin_obj:log()
+			if not ok then
+				logger.log(ngx.ERR, "LOG", "Error while calling log() on plugin " .. plugin.id .. " : " .. err)
+			else
+				logger.log(ngx.INFO, "LOG", "Return value from " .. plugin.id .. ".log() is : " .. err)
+			end
+		else
+			logger.log(ngx.INFO, "LOG", "log() method not found in " .. plugin.id .. ", skipped execution")
+		end
+	end
+end
+
+-- Display reason at info level
+local reason = utils.get_reason()
+if reason then
+	logger.log(ngx.INFO, "LOG", "Client was denied with reason : " .. reason)
+end
+
+logger.log(ngx.INFO, "LOG", "Log phase ended")
+
+}

confs/server-http/server.conf

@@ -0,0 +1,27 @@
+server {
+	# server name (vhost)
+	server_name {{ SERVER_NAME }};
+
+	# HTTP listen
+{% if LISTEN_HTTP == "yes" +%}
+	listen 0.0.0.0:{{ HTTP_PORT }}{% if MULTISITE == "no" and DISABLE_DEFAULT_SERVER == "no" %} default_server{% endif %}{% if USE_PROXY_PROTOCOL == "yes" %} proxy_protocol{% endif %};
+{% endif %}
+
+	index index.php index.html index.htm;
+
+	# custom config
+	include /opt/bunkerweb/configs/server-http/*.conf;
+{% if MULTISITE == "yes" +%}
+	include /opt/bunkerweb/configs/server-http/{{ SERVER_NAME.split(" ")[0] }}/*.conf;
+{% endif %}
+
+	# reason variable
+	set $reason '';
+
+	# include LUA files
+	include {{ NGINX_PREFIX }}access-lua.conf;
+	include {{ NGINX_PREFIX }}log-lua.conf;
+	
+	# include config files
+	include {{ NGINX_PREFIX }}server-http/*.conf;
+}