 florian
|
96db3a450d
|
log - add LOG_LEVEL variable
|
2021-05-18 21:51:13 +02:00 |
|
|
florian
|
73543f4b0e
|
hardening - add no-new-privileges
|
2021-05-18 21:35:58 +02:00 |
|
|
bunkerity
|
d9bb97be50
|
lua - move global vars from lua to site config (untested)
|
2021-05-18 17:29:00 +02:00 |
|
|
bunkerity
|
863283d090
|
started work on moving variables from .lua to nginx
|
2021-05-18 15:14:45 +02:00 |
|
|
bunkerity
|
600484b16e
|
crowdsec - fix bugs and update example
|
2021-05-18 14:03:16 +02:00 |
|
|
bunkerity
|
7c6a13c549
|
examples - improve nextcloud example so it works with webdav clients
|
2021-05-17 10:26:35 +02:00 |
|
|
bunkerity
|
b3bb4ec40f
|
remove unnecessary dependencies and update doc about certificate bundle
|
2021-05-15 21:55:57 +02:00 |
|
|
bunkerity
|
69f4657208
|
examples - fix typo BAD_BEHAVIOR_STATUS_CODES
|
2021-05-15 21:29:07 +02:00 |
|
|
bunkerity
|
d02985d213
|
check permissions for missing volumes and add comment about permissions on examples
|
2021-05-15 21:08:35 +02:00 |
|
|
bunkerity
|
b0ca85ff75
|
v1.2.5 - performance improvement
|
2021-05-14 16:42:08 +02:00 |
|
|
bunkerity
|
288b8eb851
|
docs improvement + road to v1.2.5
|
2021-05-14 15:41:15 +02:00 |
|
|
bunkerity
|
61c08fb97b
|
docs - troubleshooting
|
2021-05-14 12:12:33 +02:00 |
|
|
bunkerity
|
01ef47a669
|
docs - security tuning improvement
|
2021-05-14 11:15:00 +02:00 |
|
|
florian
|
71515a9101
|
doc - volumes list
|
2021-05-13 20:34:41 +02:00 |
|
|
bunkerity
|
a33d0658c6
|
docs - road to a beautiful documentation
|
2021-05-13 17:46:31 +02:00 |
|
|
bunkerity
|
0b3ff6a9f4
|
bad behavior - move from fail2ban to pure lua
|
2021-05-13 16:21:51 +02:00 |
|
|
bunkerity
|
eb2d0d330d
|
performance - rsyslog and fail2ban removing
|
2021-05-13 11:14:39 +02:00 |
|
|
bunkerity
|
5bcbb38638
|
doc - official document started
|
2021-05-12 17:35:32 +02:00 |
|
|
bunkerity
|
ca660b2501
|
init work on official doc
|
2021-05-12 12:28:01 +02:00 |
|
|
bunkerity
|
3a34436cd8
|
add AquaeAtrae example for ROOT_SITE_SUBFOLDER
|
2021-05-12 12:07:29 +02:00 |
|
|
bunkerity
|
b1d03cd11c
|
performance - move bad user-agents and referrers checks from nginx to LUA with caching
|
2021-05-11 15:30:16 +02:00 |
|
|
bunkerity
|
42c3fb8740
|
add sandbox allow-downloads to the default value of CONTENT_SECURITY_POLICY
|
2021-05-11 08:57:23 +02:00 |
|
|
bunkerity
|
f1c043604a
|
add missing backslash in the quickstart guide and update autoconf examples with the depends_on directive
|
2021-05-11 08:54:34 +02:00 |
|
|
bunkerity
|
fd61df205f
|
performance - move external blacklists checks from nginx to LUA
|
2021-05-10 17:51:07 +02:00 |
|
|
bunkerity
|
009d6fb5ae
|
choose connection and nofile numbers, increase error_log level to get modsecurity rules, add MODSECURITY_SEC_AUDIT_ENGINE var
|
2021-05-05 17:38:22 +02:00 |
|
|
bunkerity
|
ba4185a42e
|
jobs - fix automatic reload
|
2021-05-03 14:18:10 +02:00 |
|
|
bunkerity
|
70976d0fbc
|
fix user-agent not blocking and add documentation on bundle when USE_CUSTOM_HTTPS=yes
|
2021-05-03 13:59:55 +02:00 |
|
|
bunkerity
|
062a39c63a
|
integrate AquaeAtrae work - add ROOT_SITE_SUBFOLDER
|
2021-05-03 10:31:37 +02:00 |
|
|
bunkerity
|
83841b290a
|
jobs - edit adren work on external blacklists
|
2021-05-02 16:14:13 +02:00 |
|
|
bunkerity
|
07be626842
|
hotfix - fix API in autoconf swarm mode
|
2021-04-28 17:40:54 +02:00 |
|
|
bunkerity
|
3bb164395e
|
hotfix - move API_WHITELIST_IP edit to lua.sh
|
2021-04-28 17:00:50 +02:00 |
|
|
bunkerity
|
bc2568a172
|
v1.2.4 - nginx 1.20.0 support
|
2021-04-27 17:43:38 +02:00 |
|
|
bunkerity
|
f84fd7c9a2
|
fix permissions issues for autoconf and fix volume for ghost example
|
2021-04-27 16:49:45 +02:00 |
|
|
bunkerity
|
6521d7a27a
|
fix client cache so it works in combination with reverse proxy and examples update
|
2021-04-27 15:31:56 +02:00 |
|
|
bunkerity
|
813607fbc3
|
improve crowdsec example and disable modsec logging when not necessary
|
2021-04-27 11:21:30 +02:00 |
|
|
bunkerity
|
843644f806
|
log - replace some WARN tags from LUA logs with NOTICE to avoid confusion
|
2021-04-27 09:57:07 +02:00 |
|
|
bunkerity
|
19fa0eb25f
|
log - print modsec_audit.log to make debugging easier
|
2021-04-27 09:46:40 +02:00 |
|
|
bunkerity
|
b4df287228
|
log - send logs to remote syslog server
|
2021-04-27 09:30:10 +02:00 |
|
|
florian
|
5ce41edc03
|
api - whitelist IP/network for API
|
2021-04-26 22:22:34 +02:00 |
|
|
florian
|
a3cfb50b4d
|
example - fix certbot wildcard
|
2021-04-26 21:34:18 +02:00 |
|
|
bunkerity
|
25494acace
|
example - wildcard certificate with certbot
|
2021-04-26 17:44:48 +02:00 |
|
|
bunkerity
|
a98dae1fb6
|
fix CVE-2021-20205 and examples update
|
2021-04-26 17:00:23 +02:00 |
|
|
bunkerity
|
1a7abab570
|
nginx 1.20.0 support
|
2021-04-26 14:59:12 +02:00 |
|
|
florian
|
42b7a57f01
|
fix autoconf bug when removing config with multiple server name and increase default LIMIT_CONN_MAX for average website with HTTP2
|
2021-04-26 11:39:12 +02:00 |
|
|
bunkerity
|
02f9fbe5fc
|
autoconf - fix certbot bug when multiple server_name for one service
|
2021-04-20 11:46:53 +02:00 |
|
|
bunkerity
|
69fe066777
|
autoconf - fix bug when multiple server_name for one service
|
2021-04-20 10:00:25 +02:00 |
|
|
bunkerity
|
74417abc9c
|
fixing bugs - run as GID 101 instead of 0, different permissions checks in swarm mode and disable including server confs in swarm mode
|
2021-04-16 16:56:45 +02:00 |
|
|
bunkerity
|
ba7524a419
|
fixed LUA bug
|
2021-04-13 17:27:52 +02:00 |
|
|
bunkerity
|
b55aafb997
|
finding the LUA bug
|
2021-04-13 17:01:27 +02:00 |
|
|
bunkerity
|
b85c991b6e
|
bug fixes - /usr/local/lib/lua rights and syntax error in site-config
|
2021-04-09 17:40:19 +02:00 |
|
|
bunkerity
|
0d3658adf0
|
REVERSE_PROXY_HEADERS - use proxy_set_header instead of more_set_headers
|
2021-04-09 17:27:22 +02:00 |
|
|
bunkerity
|
0b22209c96
|
documentation - userns remap feature
|
2021-04-09 16:22:31 +02:00 |
|
|
bunkerity
|
e44a1f3e14
|
added the uri to limit_req_zone key to limit bruteforce attack on a specific resource instead of the whole service
|
2021-04-09 15:54:26 +02:00 |
|
|
bunkerity
|
aa614f82f9
|
print error when permissions are wrong on common volumes
|
2021-04-09 14:54:15 +02:00 |
|
|
bunkerity
|
c03d410b0a
|
refactored whitelisting of user-agents
|
2021-04-09 14:23:52 +02:00 |
|
|
bunkerity
|
e190167bfc
|
CIDR support with whitelist/blacklist IP
|
2021-04-09 14:10:17 +02:00 |
|
|
bunkerity
|
31e72dce1c
|
fix /usr/local/lib/lua rights and multiple server_name support with autoconf
|
2021-04-09 11:37:13 +02:00 |
|
|
bunkerity
|
b8105fc558
|
feature - whitelist URI
|
2021-04-09 10:31:00 +02:00 |
|
|
bunkerity
|
e73c10fd80
|
crowdsec - fix permissions on /usr/local/lib/lua and on /var/log files
|
2021-04-09 10:01:23 +02:00 |
|
|
bunkerity
|
a122a259c0
|
minor fix on AutoConf logs and auto disable etag with reverse proxy
|
2021-04-09 09:51:17 +02:00 |
|
|
bunkerity
|
7c4894d3b8
|
autoconf - fix remove event, generate config from nginx vars, more logs
|
2021-03-26 15:18:35 +01:00 |
|
|
bunkerity
|
533c2a1034
|
fix sed script when writing site env
|
2021-03-22 09:38:36 +01:00 |
|
|
bunkerity
|
5611d544d6
|
remove reference to USE_PHP
|
2021-03-19 09:38:44 +01:00 |
|
|
bunkerity
|
397182f18d
|
add link to twitter account
|
2021-03-18 18:11:52 +01:00 |
|
|
bunkerity
|
c5c5fb17b5
|
v1.2.3 - swarm support
|
2021-03-18 18:08:42 +01:00 |
|
|
bunkerity
|
017a7780fb
|
README update, default cron update and new parameters to ui
|
2021-03-18 17:11:58 +01:00 |
|
|
bunkerity
|
34d9db7a8b
|
web ui - bug fixes
|
2021-03-18 12:34:46 +01:00 |
|
|
bunkerity
|
361c66ca61
|
fixed bugs with MULTISITE variables and swarm example
|
2021-03-18 10:29:37 +01:00 |
|
|
bunkerity
|
afc6678855
|
road to v1.2.3 - fixing bugs
|
2021-03-17 17:55:56 +01:00 |
|
|
bunkerity
|
c40fb33175
|
road to swarm - automatic reload after jobs
|
2021-03-17 12:16:56 +01:00 |
|
|
bunkerity
|
93ad3c0b51
|
road to swarm - let's encrypt fix
|
2021-03-17 10:37:20 +01:00 |
|
|
bunkerity
|
ceed904882
|
road to swarm - still some mess to fix
|
2021-03-16 17:56:24 +01:00 |
|
|
bunkerity
|
6a714e2ece
|
road to swarm - fix race condition on initial configuration
|
2021-03-14 16:50:08 +01:00 |
|
|
bunkerity
|
0d3da03534
|
prepare /www directory, fix log socket path and whitelist acme challenges path
|
2021-03-14 12:33:59 +01:00 |
|
|
bunkerity
|
33163f65b3
|
init work on disabling root processes
|
2021-03-13 22:52:23 +01:00 |
|
|
bunkerity
|
a2543384cd
|
road to swarm - add openssl to autoconf, fix api_uri in LUA, fix file rights
|
2021-03-13 15:28:15 +01:00 |
|
|
bunkerity
|
3591715f21
|
road to swarm - fixing things
|
2021-03-12 17:31:26 +01:00 |
|
|
bunkerity
|
95f7ca5b2d
|
road to swarm support - needs a lot of testing
|
2021-03-12 15:17:45 +01:00 |
|
|
bunkerity
|
816fa47cbb
|
introducing SWARM_MODE env var
|
2021-03-12 12:40:52 +01:00 |
|
|
bunkerity
|
7509ec2f2c
|
basic API to be used in swarm mode
|
2021-03-12 10:42:31 +01:00 |
|
|
bunkerity
|
781e4c8cbb
|
autoconf little work on swarm support
|
2021-03-10 17:24:02 +01:00 |
|
|
bunkerity
|
e04c783d1e
|
autoconf - init work on swarm mode
|
2021-03-09 17:33:22 +01:00 |
|
|
bunkerity
|
e12b656bd5
|
Merge branch 'patch-7' of https://github.com/thelittlefireman/bunkerized-nginx into dev
|
2021-03-08 14:06:54 +01:00 |
|
|
bunkerity
|
cae05447d3
|
custom crontab values
|
2021-03-08 13:58:14 +01:00 |
|
|
bunkerity
|
4b58e22657
|
Merge branch 'patch-5' of https://github.com/thelittlefireman/bunkerized-nginx into dev
|
2021-03-08 13:52:35 +01:00 |
|
|
bunkerity
|
6b56e21a09
|
Merge branch 'whitelist_ua' of https://github.com/thelittlefireman/bunkerized-nginx into dev
|
2021-03-08 13:46:28 +01:00 |
|
|
bunkerity
|
544a09e8da
|
Update lua-cs-bouncer
|
2021-03-08 12:02:56 +01:00 |
|
|
bunkerity
|
8386dd4a2a
|
custom config outside server block
|
2021-03-08 11:53:11 +01:00 |
|
|
bunkerity
|
d5d699252c
|
v1.2.2 - web UI (beta)
|
2020-12-30 21:22:18 +01:00 |
|
|
bunkerity
|
50f95420b5
|
README update - road to v1.2.2
|
2020-12-30 17:57:00 +01:00 |
|
|
bunkerity
|
dc382c3e04
|
various fixes - autoconf process order, multisite config and examples
|
2020-12-30 16:22:10 +01:00 |
|
|
bunkerity
|
0026328f25
|
edit default FAIL2BAN_IGNOREIP subnets
|
2020-12-30 14:31:16 +01:00 |
|
|
bunkerity
|
825e6a747e
|
crowdsec v1 integrated
|
2020-12-28 21:41:30 +01:00 |
|
|
bunkerity
|
09a984c86b
|
started crowdsec v1 integration
|
2020-12-28 18:42:20 +01:00 |
|
|
bunkerity
|
fd7afa17b3
|
fix missing ';' in include
|
2020-12-28 11:43:43 +01:00 |
|
|
bunkerity
|
58e1d66bc7
|
UI - minor alert css fix
|
2020-12-28 11:37:13 +01:00 |
|
|
bunkerity
|
7026643f8a
|
UI - fix missing MULTISITE env var when managing services
|
2020-12-28 10:20:29 +01:00 |
|
|
bunkerity
|
06f688fe97
|
fixed stop and reload operations
|
2020-12-27 22:25:07 +01:00 |
|
|
bunkerity
|
c65b78b1cc
|
UI - instances/services backend update (needs testing)
|
2020-12-27 17:04:59 +01:00 |
|
|
bunkerity
|
f9b9b9546f
|
UI - introduced multiple config parameters (like reverse proxy) in frontend
|
2020-12-27 14:42:52 +01:00 |
|