Commit Graph
100 Commits
Author SHA1 Message Date
bunkerity 388fc1a0e8 plugins - started basic plugin system 2021-06-04 17:42:34 +02:00
bunkerity 62217a3210 add contributing guidelines and license 2021-06-04 10:08:11 +02:00
bunkerity 4b31d005eb crowdsec and generator fixes 2021-06-03 17:44:12 +02:00
bunkerity d2135c19c0 docs - road to v1.2.6 2021-06-02 17:47:00 +02:00
bunkerity 8cda1baf77 fix web ui multiple variables and add default error pages 2021-06-02 15:33:42 +02:00
bunkerity 445032406b dnsbl - disable checks when IP is local 2021-06-02 13:46:57 +02:00
bunkerity 74fb015366 web UI - init work on using docker-socket-proxy 2021-06-02 12:12:30 +02:00
bunkerity ee178de6ab web ui - mostly finished templating integration (needs some testing) 2021-06-01 15:22:03 +02:00
bunkerity 7323525b69 ui - show only multisite vars for settings 2021-06-01 10:54:59 +02:00
bunkerity 82e47f147d ui - Dockerfile fixes and missing get_config function 2021-05-31 21:06:05 +02:00
bunkerity 2db967ad1d templating - road to web ui 2021-05-31 17:49:37 +02:00
florian 1d96620ae6 templating - init integration into web ui 2021-05-31 09:48:26 +02:00
bunkerity 99c259bf18 templating - prepare integration into ui 2021-05-28 16:41:41 +02:00
bunkerity c7b81cfc10 various bug fixes related to HTTPS 2021-05-28 14:57:45 +02:00
bunkerity dfce0c06dd autoconf - fixing various bug when SWARM_MODE=yes 2021-05-28 12:16:56 +02:00
bunkerity 0f8e56a668 templating - fixing bugs with autoconf 2021-05-27 14:41:21 +02:00
bunkerity f950abdc24 templating - started integration into autoconf 2021-05-27 12:34:00 +02:00
bunkerity 4a73ae8197 various bug fixes on templates and nginx update to 1.20.1 2021-05-27 09:53:14 +02:00
bunkerity e2f02ee91e templating - prepare integration for autoconf 2021-05-26 20:50:03 +02:00
bunkerity a991b262ef remove ClamAV because of GPL and started work on read-only filesystem 2021-05-26 17:18:49 +02:00
bunkerity a8bc17e836 templating - started integration into docker image 2021-05-26 14:50:50 +02:00
bunkerity ec19f93081 templating - added missing features in site templates 2021-05-25 17:07:06 +02:00
bunkerity 23aa053003 templating - auth basic support 2021-05-25 12:18:40 +02:00
bunkerity 289ad106cb templating - multisite support 2021-05-25 11:43:03 +02:00
bunkerity bbc5bbc9e9 templating - fix some site templates 2021-05-24 20:52:17 +02:00
bunkerity 633a07686f templating - init work on site templates 2021-05-24 17:39:38 +02:00
bunkerity 996c45df42 templating - init work on global templates 2021-05-21 17:12:13 +02:00
bunkerity 801530baf3 templating - road to full jinja2 templates 2021-05-21 14:55:54 +02:00
bunkerity c65dda3917 templating - init work on templating with jinja2 2021-05-21 11:54:37 +02:00
bunkerity ea891969c1 templating - updated settings.json with global settings 2021-05-20 14:48:45 +02:00
bunkerity 698ae17c49 templating - init work on generic settings management 2021-05-20 12:27:35 +02:00
bunkerity 6645632846 antibot - basic pow with javascript 2021-05-19 17:36:29 +02:00
bunkerity 16e5ede130 antibot - custom templates 2021-05-19 16:37:28 +02:00
bunkerity 8260746fe1 logs/lua - add logger tool 2021-05-19 11:11:18 +02:00
florian de560490d3 fix LUA array variables and add LOG_LEVEL to the troubleshooting section 2021-05-19 09:18:38 +02:00
florian 96db3a450d log - add LOG_LEVEL variable 2021-05-18 21:51:13 +02:00
florian 73543f4b0e hardening - add no-new-privileges 2021-05-18 21:35:58 +02:00
bunkerity d9bb97be50 lua - move global vars from lua to site config (untested) 2021-05-18 17:29:00 +02:00
bunkerity 863283d090 started work on moving variables from .lua to nginx 2021-05-18 15:14:45 +02:00
bunkerity 600484b16e crowdsec - fix bugs and update example 2021-05-18 14:03:16 +02:00
bunkerity 7c6a13c549 examples - improve nextcloud example so it works with webdav clients 2021-05-17 10:26:35 +02:00
bunkerity b3bb4ec40f remove unnecessary dependencies and update doc about certificate bundle 2021-05-15 21:55:57 +02:00
bunkerity 69f4657208 examples - fix typo BAD_BEHAVIOR_STATUS_CODES 2021-05-15 21:29:07 +02:00
bunkerity d02985d213 check permissions for missing volumes and add comment about permissions on examples 2021-05-15 21:08:35 +02:00
bunkerity b0ca85ff75 v1.2.5 - performance improvement 2021-05-14 16:42:08 +02:00
bunkerity 288b8eb851 docs improvement + road to v1.2.5 2021-05-14 15:41:15 +02:00
bunkerity 61c08fb97b docs - troubleshooting 2021-05-14 12:12:33 +02:00
bunkerity 01ef47a669 docs - security tuning improvement 2021-05-14 11:15:00 +02:00
florian 71515a9101 doc - volumes list 2021-05-13 20:34:41 +02:00
bunkerity a33d0658c6 docs - road to a beautiful documentation 2021-05-13 17:46:31 +02:00
bunkerity 0b3ff6a9f4 bad behavior - move from fail2ban to pure lua 2021-05-13 16:21:51 +02:00
bunkerity eb2d0d330d performance - rsyslog and fail2ban removing 2021-05-13 11:14:39 +02:00
bunkerity 5bcbb38638 doc - official document started 2021-05-12 17:35:32 +02:00
bunkerity ca660b2501 init work on official doc 2021-05-12 12:28:01 +02:00
bunkerity 3a34436cd8 add AquaeAtrae example for ROOT_SITE_SUBFOLDER 2021-05-12 12:07:29 +02:00
bunkerity b1d03cd11c performance - move bad user-agents and referrers checks from nginx to LUA with caching 2021-05-11 15:30:16 +02:00
bunkerity 42c3fb8740 add sandbox allow-downloads to the default value of CONTENT_SECURITY_POLICY 2021-05-11 08:57:23 +02:00
bunkerity f1c043604a add missing backslash in the quickstart guide and update autoconf examples with the depends_on directive 2021-05-11 08:54:34 +02:00
bunkerity fd61df205f performance - move external blacklists checks from nginx to LUA 2021-05-10 17:51:07 +02:00
bunkerity 009d6fb5ae choose connection and nofile numbers, increase error_log level to get modsecurity rules, add MODSECURITY_SEC_AUDIT_ENGINE var 2021-05-05 17:38:22 +02:00
bunkerity ba4185a42e jobs - fix automatic reload 2021-05-03 14:18:10 +02:00
bunkerity 70976d0fbc fix user-agent not blocking and add documentation on bundle when USE_CUSTOM_HTTPS=yes 2021-05-03 13:59:55 +02:00
bunkerity 062a39c63a integrate AquaeAtrae work - add ROOT_SITE_SUBFOLDER 2021-05-03 10:31:37 +02:00
bunkerity 83841b290a jobs - edit adren work on external blacklists 2021-05-02 16:14:13 +02:00
bunkerity 07be626842 hotfix - fix API in autoconf swarm mode 2021-04-28 17:40:54 +02:00
bunkerity 3bb164395e hotfix - move API_WHITELIST_IP edit to lua.sh 2021-04-28 17:00:50 +02:00
bunkerity bc2568a172 v1.2.4 - nginx 1.20.0 support 2021-04-27 17:43:38 +02:00
bunkerity f84fd7c9a2 fix permissions issues for autoconf and fix volume for ghost example 2021-04-27 16:49:45 +02:00
bunkerity 6521d7a27a fix client cache so it works in combination with reverse proxy and examples update 2021-04-27 15:31:56 +02:00
bunkerity 813607fbc3 improve crowdsec example and disable modsec logging when not necessary 2021-04-27 11:21:30 +02:00
bunkerity 843644f806 log - replace some WARN tags from LUA logs with NOTICE to avoid confusion 2021-04-27 09:57:07 +02:00
bunkerity 19fa0eb25f log - print modsec_audit.log to make debugging easier 2021-04-27 09:46:40 +02:00
bunkerity b4df287228 log - send logs to remote syslog server 2021-04-27 09:30:10 +02:00
florian 5ce41edc03 api - whitelist IP/network for API 2021-04-26 22:22:34 +02:00
florian a3cfb50b4d example - fix certbot wildcard 2021-04-26 21:34:18 +02:00
bunkerity 25494acace example - wildcard certificate with certbot 2021-04-26 17:44:48 +02:00
bunkerity a98dae1fb6 fix CVE-2021-20205 and examples update 2021-04-26 17:00:23 +02:00
bunkerity 1a7abab570 nginx 1.20.0 support 2021-04-26 14:59:12 +02:00
florian 42b7a57f01 fix autoconf bug when removing config with multiple server name and increase default LIMIT_CONN_MAX for average website with HTTP2 2021-04-26 11:39:12 +02:00
bunkerity 02f9fbe5fc autoconf - fix certbot bug when multiple server_name for one service 2021-04-20 11:46:53 +02:00
bunkerity 69fe066777 autoconf - fix bug when multiple server_name for one service 2021-04-20 10:00:25 +02:00
bunkerity 74417abc9c fixing bugs - run as GID 101 instead of 0, different permissions checks in swarm mode and disable including server confs in swarm mode 2021-04-16 16:56:45 +02:00
bunkerity ba7524a419 fixed LUA bug 2021-04-13 17:27:52 +02:00
bunkerity b55aafb997 finding the LUA bug 2021-04-13 17:01:27 +02:00
bunkerity b85c991b6e bug fixes - /usr/local/lib/lua rights and syntax error in site-config 2021-04-09 17:40:19 +02:00
bunkerity 0d3658adf0 REVERSE_PROXY_HEADERS - use proxy_set_header instead of more_set_headers 2021-04-09 17:27:22 +02:00
bunkerity 0b22209c96 documentation - userns remap feature 2021-04-09 16:22:31 +02:00
bunkerity e44a1f3e14 added the uri to limit_req_zone key to limit bruteforce attack on a specific resource instead of the whole service 2021-04-09 15:54:26 +02:00
bunkerity aa614f82f9 print error when permissions are wrong on common volumes 2021-04-09 14:54:15 +02:00
bunkerity c03d410b0a refactored whitelisting of user-agents 2021-04-09 14:23:52 +02:00
bunkerity e190167bfc CIDR support with whitelist/blacklist IP 2021-04-09 14:10:17 +02:00
bunkerity 31e72dce1c fix /usr/local/lib/lua rights and multiple server_name support with autoconf 2021-04-09 11:37:13 +02:00
bunkerity b8105fc558 feature - whitelist URI 2021-04-09 10:31:00 +02:00
bunkerity e73c10fd80 crowdsec - fix permissions on /usr/local/lib/lua and on /var/log files 2021-04-09 10:01:23 +02:00
bunkerity a122a259c0 minor fix on AutoConf logs and auto disable etag with reverse proxy 2021-04-09 09:51:17 +02:00
bunkerity 7c4894d3b8 autoconf - fix remove event, generate config from nginx vars, more logs 2021-03-26 15:18:35 +01:00
bunkerity 533c2a1034 fix sed script when writing site env 2021-03-22 09:38:36 +01:00
bunkerity 5611d544d6 remove reference to USE_PHP 2021-03-19 09:38:44 +01:00
bunkerity 397182f18d add link to twitter account 2021-03-18 18:11:52 +01:00
bunkerity c5c5fb17b5 v1.2.3 - swarm support 2021-03-18 18:08:42 +01:00