146 Commits

Author SHA1 Message Date
bunkerity
7b9722fac4
jobs - add remote API 2021-10-06 12:13:13 +02:00
florian
ca81535bb3
swarm/k8s - less storage, more API 2021-09-05 00:36:15 +02:00
bunkerity
4e178b474c
autoconf - basic ingress controller support for kubernetes 2021-08-03 16:39:39 +02:00
bunkerity
24d9cce82f
autoconf - various bug fixes in Swarm mode 2021-07-30 17:08:54 +02:00
bunkerity
f866ef6325
autoconf - minor fixes, prepare Swarm testing 2021-07-29 17:32:33 +02:00
bunkerity
1a32e7c02c
autoconf - various bug fixes with DockerController 2021-07-29 15:43:51 +02:00
bunkerity
50c279617b
jobs - improved log and reload management 2021-07-23 17:28:05 +02:00
bunkerity
ef8969e2cf
certbot - add USE_LETS_ENCRYPT_STAGING=yes/no env var for using staging or production servers of let's encrypt 2021-07-23 11:51:50 +02:00
bunkerity
280d189864
jobs - avoid reload when not necessary 2021-07-21 17:09:42 +02:00
bunkerity
d12369c900
jobs - various bugs fixed and old files removed 2021-07-21 11:55:14 +02:00
bunkerity
366e39f591
jobs - SelfSignedCert, runner and reloader 2021-07-20 22:52:01 +02:00
bunkerity
e241b0c939
logs - move everything from /var/log to /var/log/nginx 2021-07-07 14:36:00 +02:00
bunkerity
2ea7331dad
jobs - disable post-jobs when SWARM_MODE=yes on SIGHUP 2021-07-05 16:49:27 +02:00
bunkerity
4991922878
linux - fix daemon directive and rights on /etc/nginx 2021-06-23 14:06:39 +02:00
bunkerity
6bb6facd88
add load: true when autobuilding images and move from /bin/sh to /bin/bash 2021-06-22 10:16:20 +02:00
bunkerity
1e02368e8a
linux/docker - common /opt/bunkerized-nginx folder 2021-06-21 14:56:48 +02:00
bunkerity
491d879fec
jobs - cleaning the mess when using autoconf without swarm mode 2021-06-14 17:58:38 +02:00
bunkerity
52534510ec
fix bug when AUTO_LETS_ENCRYPT=yes and certbot can't resolve challenges 2021-06-14 14:59:27 +02:00
bunkerity
01857d8ac0
gen - display the reason when ignoring a variable 2021-06-14 09:58:04 +02:00
bunkerity
ab9f9e0a4c
jobs - fix jobs when MULTISITE=yes 2021-06-14 09:02:16 +02:00
bunkerity
16101144c5
self-signed cert - fix bugs 2021-06-11 11:39:36 +02:00
bunkerity
dd5890e760
geoip - fix bug when using GeoIP 2021-06-11 11:01:13 +02:00
bunkerity
9442e59141
jobs - fix jobs in Swarm mode 2021-06-07 09:48:50 +02:00
bunkerity
fcc6b3b5e4
various bug fixes related to Swarm 2021-06-06 23:22:33 +02:00
bunkerity
c7b81cfc10
various bug fixes related to HTTPS 2021-05-28 14:57:45 +02:00
bunkerity
4a73ae8197
various bug fixes on templates and nginx update to 1.20.1 2021-05-27 09:53:14 +02:00
bunkerity
a991b262ef
remove ClamAV because of GPL and started work on read-only filesystem 2021-05-26 17:18:49 +02:00
bunkerity
a8bc17e836
templating - started integration into docker image 2021-05-26 14:50:50 +02:00
florian
96db3a450d
log - add LOG_LEVEL variable 2021-05-18 21:51:13 +02:00
bunkerity
d9bb97be50
lua - move global vars from lua to site config (untested) 2021-05-18 17:29:00 +02:00
bunkerity
863283d090
started work on moving variables from .lua to nginx 2021-05-18 15:14:45 +02:00
bunkerity
600484b16e
crowdsec - fix bugs and update example 2021-05-18 14:03:16 +02:00
bunkerity
d02985d213
check permissions for missing volumes and add comment about permissions on examples 2021-05-15 21:08:35 +02:00
bunkerity
0b3ff6a9f4
bad behavior - move from fail2ban to pure lua 2021-05-13 16:21:51 +02:00
bunkerity
eb2d0d330d
performance - rsyslog and fail2ban removing 2021-05-13 11:14:39 +02:00
bunkerity
b1d03cd11c
performance - move bad user-agents and referrers checks from nginx to LUA with caching 2021-05-11 15:30:16 +02:00
bunkerity
42c3fb8740
add sandbox allow-downloads to the default value of CONTENT_SECURITY_POLICY 2021-05-11 08:57:23 +02:00
bunkerity
fd61df205f
performance - move external blacklists checks from nginx to LUA 2021-05-10 17:51:07 +02:00
bunkerity
009d6fb5ae
choose connection and nofile numbers, increase error_log level to get modsecurity rules, add MODSECURITY_SEC_AUDIT_ENGINE var 2021-05-05 17:38:22 +02:00
bunkerity
062a39c63a
integrate AquaeAtrae work - add ROOT_SITE_SUBFOLDER 2021-05-03 10:31:37 +02:00
bunkerity
07be626842
hotfix - fix API in autoconf swarm mode 2021-04-28 17:40:54 +02:00
bunkerity
3bb164395e
hotfix - move API_WHITELIST_IP edit to lua.sh 2021-04-28 17:00:50 +02:00
bunkerity
f84fd7c9a2
fix permissions issues for autoconf and fix volume for ghost example 2021-04-27 16:49:45 +02:00
bunkerity
19fa0eb25f
log - print modsec_audit.log to make debugging easier 2021-04-27 09:46:40 +02:00
bunkerity
b4df287228
log - send logs to remote syslog server 2021-04-27 09:30:10 +02:00
florian
5ce41edc03
api - whitelist IP/network for API 2021-04-26 22:22:34 +02:00
florian
42b7a57f01
fix autoconf bug when removing config with multiple server name and increase default LIMIT_CONN_MAX for average website with HTTP2 2021-04-26 11:39:12 +02:00
bunkerity
02f9fbe5fc autoconf - fix certbot bug when multiple server_name for one service 2021-04-20 11:46:53 +02:00
bunkerity
74417abc9c fixing bugs - run as GID 101 instead of 0, different permissions checks in swarm mode and disable including server confs in swarm mode 2021-04-16 16:56:45 +02:00
bunkerity
b85c991b6e bug fixes - /usr/local/lib/lua rights and syntax error in site-config 2021-04-09 17:40:19 +02:00