bunkerweb 1.4.0

examples/gogs/README.md

@@ -1,15 +0,0 @@
-# Gogs
-
-Gogs is an easy to install, cross-platform and lightweight self-hosted Git service. More info on the [website](https://gogs.io/).
-
-## Architecture
-
-<img src="https://github.com/bunkerity/bunkerized-nginx/blob/master/examples/gogs/architecture.png?raw=true" />
-
-## Configuration
-
-You will need to edit the `data-gogs/gogs/conf/app.ini` with your own settings.
-
-## Docker
-
-See [docker-compose.yml](https://github.com/bunkerity/bunkerized-nginx/blob/master/examples/gogs/docker-compose.yml).

examples/gogs/bw-data/configs/modsec-crs/gogs.conf

@@ -4,4 +4,4 @@ SecAction \
   nolog,\
   pass,\
   t:none,\
-  setvar:'tx.allowed_request_content_type=|application/x-www-form-urlencoded| |multipart/form-data| |multipart/related| |text/xml| |application/xml| |application/soap+xml| |application/x-amf| |application/json| |application/cloudevents+json| |application/cloudevents-batch+json| |application/octet-stream| |application/csp-report| |application/xss-auditor-report| |text/plain| |application/x-git-upload-pack-request| |application/x-git-receive-pack-request|'"
+  setvar:'tx.allowed_request_content_type=|application/x-www-form-urlencoded| |multipart/form-data| |multipart/related| |text/xml| |application/xml| |application/soap+xml| |application/x-amf| |application/json| |application/cloudevents+json| |application/cloudevents-batch+json| |application/octet-stream| |application/csp-report| |application/xss-auditor-report| |text/plain| |application/x-git-upload-pack-request| |application/x-git-receive-pack-request|'"

examples/gogs/docker-compose.yml

@@ -2,29 +2,34 @@ version: '3'
 
 services:
 
-  myreverse:
-    image: bunkerity/bunkerized-nginx
-    restart: always
+  mybunker:
+    image: bunkerity/bunkerweb:1.4.0
     ports:
       - 80:8080
       - 443:8443
+    # ⚠️ read this if you use local folders for volumes ⚠️
+    # bunkerweb runs as an unprivileged user with UID/GID 101
+    # don't forget to edit the permissions of the files and folders accordingly
+    # example if you need to create a directory : mkdir folder && chown root:101 folder && chmod 770 folder
+    # another example for existing folder : chown -R root:101 folder && chmod -R 770 folder
+    # more info at https://docs.bunkerweb.io
     volumes:
-      - ./letsencrypt:/etc/letsencrypt
-      - ./modsec-crs-confs:/modsec-crs-confs:ro              # fix FP with CRS
+      - ./bw-data:/data # contains some Core Rule Set configuration to fix FP
     environment:
-      - SERVER_NAME=www.example.com                          # replace with your domain
+      - SERVER_NAME=www.example.com # replace with your domain
       - SERVE_FILES=no
       - DISABLE_DEFAULT_SERVER=yes
-      - REDIRECT_HTTP_TO_HTTPS=yes
       - AUTO_LETS_ENCRYPT=yes
-      - USE_PROXY_CACHE=yes
       - USE_CLIENT_CACHE=yes
       - USE_GZIP=yes
       - USE_REVERSE_PROXY=yes
       - REVERSE_PROXY_URL=/
       - REVERSE_PROXY_HOST=http://mygogs:3000
+      - WHITELIST_USER_AGENT=^git
+      - REVERSE_PROXY_HEADERS_1=Authorization $http_authorization
+      - MAX_CLIENT_SIZE=1G
 
   mygogs:
     image: gogs/gogs
     volumes:
-      - ./data-gogs:/data
+      - ./gogs-data:/data

examples/gogs/setup.sh

@@ -0,0 +1,9 @@
+#!/bin/bash
+
+if [ $(id -u) -ne 0 ] ; then
+	echo "❌ Run me as root"
+	exit 1
+fi
+
+chown -R root:101 bw-data
+chmod -R 770 bw-data