 bunkerity
|
e2f02ee91e
|
templating - prepare integration for autoconf
|
2021-05-26 20:50:03 +02:00 |
|
|
bunkerity
|
a991b262ef
|
remove ClamAV because of GPL and started work on read-only filesystem
|
2021-05-26 17:18:49 +02:00 |
|
|
bunkerity
|
a8bc17e836
|
templating - started integration into docker image
|
2021-05-26 14:50:50 +02:00 |
|
|
bunkerity
|
ec19f93081
|
templating - added missing features in site templates
|
2021-05-25 17:07:06 +02:00 |
|
|
bunkerity
|
23aa053003
|
templating - auth basic support
|
2021-05-25 12:18:40 +02:00 |
|
|
bunkerity
|
289ad106cb
|
templating - multisite support
|
2021-05-25 11:43:03 +02:00 |
|
|
bunkerity
|
bbc5bbc9e9
|
templating - fix some site templates
|
2021-05-24 20:52:17 +02:00 |
|
|
bunkerity
|
633a07686f
|
templating - init work on site templates
|
2021-05-24 17:39:38 +02:00 |
|
|
bunkerity
|
996c45df42
|
templating - init work on global templates
|
2021-05-21 17:12:13 +02:00 |
|
|
bunkerity
|
801530baf3
|
templating - road to full jinja2 templates
|
2021-05-21 14:55:54 +02:00 |
|
|
bunkerity
|
c65dda3917
|
templating - init work on templating with jinja2
|
2021-05-21 11:54:37 +02:00 |
|
|
bunkerity
|
ea891969c1
|
templating - updated settings.json with global settings
|
2021-05-20 14:48:45 +02:00 |
|
|
bunkerity
|
698ae17c49
|
templating - init work on generic settings management
|
2021-05-20 12:27:35 +02:00 |
|
|
bunkerity
|
6645632846
|
antibot - basic pow with javascript
|
2021-05-19 17:36:29 +02:00 |
|
|
bunkerity
|
16e5ede130
|
antibot - custom templates
|
2021-05-19 16:37:28 +02:00 |
|
|
bunkerity
|
8260746fe1
|
logs/lua - add logger tool
|
2021-05-19 11:11:18 +02:00 |
|
|
florian
|
de560490d3
|
fix LUA array variables and add LOG_LEVEL to the troubleshooting section
|
2021-05-19 09:18:38 +02:00 |
|
|
florian
|
96db3a450d
|
log - add LOG_LEVEL variable
|
2021-05-18 21:51:13 +02:00 |
|
|
florian
|
73543f4b0e
|
hardening - add no-new-privileges
|
2021-05-18 21:35:58 +02:00 |
|
|
bunkerity
|
d9bb97be50
|
lua - move global vars from lua to site config (untested)
|
2021-05-18 17:29:00 +02:00 |
|
|
bunkerity
|
863283d090
|
started work on moving variables from .lua to nginx
|
2021-05-18 15:14:45 +02:00 |
|
|
bunkerity
|
600484b16e
|
crowdsec - fix bugs and update example
|
2021-05-18 14:03:16 +02:00 |
|
|
bunkerity
|
7c6a13c549
|
examples - improve nextcloud example so it works with webdav clients
|
2021-05-17 10:26:35 +02:00 |
|
|
bunkerity
|
b3bb4ec40f
|
remove unnecessary dependencies and update doc about certificate bundle
|
2021-05-15 21:55:57 +02:00 |
|
|
bunkerity
|
69f4657208
|
examples - fix typo BAD_BEHAVIOR_STATUS_CODES
|
2021-05-15 21:29:07 +02:00 |
|
|
bunkerity
|
d02985d213
|
check permissions for missing volumes and add comment about permissions on examples
|
2021-05-15 21:08:35 +02:00 |
|
|
bunkerity
|
b0ca85ff75
|
v1.2.5 - performance improvement
|
2021-05-14 16:42:08 +02:00 |
|
|
bunkerity
|
288b8eb851
|
docs improvement + road to v1.2.5
|
2021-05-14 15:41:15 +02:00 |
|
|
bunkerity
|
61c08fb97b
|
docs - troubleshooting
|
2021-05-14 12:12:33 +02:00 |
|
|
bunkerity
|
01ef47a669
|
docs - security tuning improvement
|
2021-05-14 11:15:00 +02:00 |
|
|
florian
|
71515a9101
|
doc - volumes list
|
2021-05-13 20:34:41 +02:00 |
|
|
bunkerity
|
a33d0658c6
|
docs - road to a beautiful documentation
|
2021-05-13 17:46:31 +02:00 |
|
|
bunkerity
|
0b3ff6a9f4
|
bad behavior - move from fail2ban to pure lua
|
2021-05-13 16:21:51 +02:00 |
|
|
bunkerity
|
eb2d0d330d
|
performance - rsyslog and fail2ban removing
|
2021-05-13 11:14:39 +02:00 |
|
|
bunkerity
|
5bcbb38638
|
doc - official document started
|
2021-05-12 17:35:32 +02:00 |
|
|
bunkerity
|
ca660b2501
|
init work on official doc
|
2021-05-12 12:28:01 +02:00 |
|
|
bunkerity
|
3a34436cd8
|
add AquaeAtrae example for ROOT_SITE_SUBFOLDER
|
2021-05-12 12:07:29 +02:00 |
|
|
bunkerity
|
b1d03cd11c
|
performance - move bad user-agents and referrers checks from nginx to LUA with caching
|
2021-05-11 15:30:16 +02:00 |
|
|
bunkerity
|
42c3fb8740
|
add sandbox allow-downloads to the default value of CONTENT_SECURITY_POLICY
|
2021-05-11 08:57:23 +02:00 |
|
|
bunkerity
|
f1c043604a
|
add missing backslash in the quickstart guide and update autoconf examples with the depends_on directive
|
2021-05-11 08:54:34 +02:00 |
|
|
bunkerity
|
fd61df205f
|
performance - move external blacklists checks from nginx to LUA
|
2021-05-10 17:51:07 +02:00 |
|
|
bunkerity
|
009d6fb5ae
|
choose connection and nofile numbers, increase error_log level to get modsecurity rules, add MODSECURITY_SEC_AUDIT_ENGINE var
|
2021-05-05 17:38:22 +02:00 |
|
|
bunkerity
|
ba4185a42e
|
jobs - fix automatic reload
|
2021-05-03 14:18:10 +02:00 |
|
|
bunkerity
|
70976d0fbc
|
fix user-agent not blocking and add documentation on bundle when USE_CUSTOM_HTTPS=yes
|
2021-05-03 13:59:55 +02:00 |
|
|
bunkerity
|
062a39c63a
|
integrate AquaeAtrae work - add ROOT_SITE_SUBFOLDER
|
2021-05-03 10:31:37 +02:00 |
|
|
bunkerity
|
83841b290a
|
jobs - edit adren work on external blacklists
|
2021-05-02 16:14:13 +02:00 |
|
|
bunkerity
|
07be626842
|
hotfix - fix API in autoconf swarm mode
|
2021-04-28 17:40:54 +02:00 |
|
|
bunkerity
|
3bb164395e
|
hotfix - move API_WHITELIST_IP edit to lua.sh
|
2021-04-28 17:00:50 +02:00 |
|
|
bunkerity
|
bc2568a172
|
v1.2.4 - nginx 1.20.0 support
|
2021-04-27 17:43:38 +02:00 |
|
|
bunkerity
|
f84fd7c9a2
|
fix permissions issues for autoconf and fix volume for ghost example
|
2021-04-27 16:49:45 +02:00 |
|
|
bunkerity
|
6521d7a27a
|
fix client cache so it works in combination with reverse proxy and examples update
|
2021-04-27 15:31:56 +02:00 |
|
|
bunkerity
|
813607fbc3
|
improve crowdsec example and disable modsec logging when not necessary
|
2021-04-27 11:21:30 +02:00 |
|
|
bunkerity
|
843644f806
|
log - replace some WARN tags from LUA logs with NOTICE to avoid confusion
|
2021-04-27 09:57:07 +02:00 |
|
|
bunkerity
|
19fa0eb25f
|
log - print modsec_audit.log to make debugging easier
|
2021-04-27 09:46:40 +02:00 |
|
|
bunkerity
|
b4df287228
|
log - send logs to remote syslog server
|
2021-04-27 09:30:10 +02:00 |
|
|
florian
|
5ce41edc03
|
api - whitelist IP/network for API
|
2021-04-26 22:22:34 +02:00 |
|
|
florian
|
a3cfb50b4d
|
example - fix certbot wildcard
|
2021-04-26 21:34:18 +02:00 |
|
|
bunkerity
|
25494acace
|
example - wildcard certificate with certbot
|
2021-04-26 17:44:48 +02:00 |
|
|
bunkerity
|
a98dae1fb6
|
fix CVE-2021-20205 and examples update
|
2021-04-26 17:00:23 +02:00 |
|
|
bunkerity
|
1a7abab570
|
nginx 1.20.0 support
|
2021-04-26 14:59:12 +02:00 |
|
|
florian
|
42b7a57f01
|
fix autoconf bug when removing config with multiple server name and increase default LIMIT_CONN_MAX for average website with HTTP2
|
2021-04-26 11:39:12 +02:00 |
|
|
bunkerity
|
02f9fbe5fc
|
autoconf - fix certbot bug when multiple server_name for one service
|
2021-04-20 11:46:53 +02:00 |
|
|
bunkerity
|
69fe066777
|
autoconf - fix bug when multiple server_name for one service
|
2021-04-20 10:00:25 +02:00 |
|
|
bunkerity
|
74417abc9c
|
fixing bugs - run as GID 101 instead of 0, different permissions checks in swarm mode and disable including server confs in swarm mode
|
2021-04-16 16:56:45 +02:00 |
|
|
bunkerity
|
ba7524a419
|
fixed LUA bug
|
2021-04-13 17:27:52 +02:00 |
|
|
bunkerity
|
b55aafb997
|
finding the LUA bug
|
2021-04-13 17:01:27 +02:00 |
|
|
bunkerity
|
b85c991b6e
|
bug fixes - /usr/local/lib/lua rights and syntax error in site-config
|
2021-04-09 17:40:19 +02:00 |
|
|
bunkerity
|
0d3658adf0
|
REVERSE_PROXY_HEADERS - use proxy_set_header instead of more_set_headers
|
2021-04-09 17:27:22 +02:00 |
|
|
bunkerity
|
0b22209c96
|
documentation - userns remap feature
|
2021-04-09 16:22:31 +02:00 |
|
|
bunkerity
|
e44a1f3e14
|
added the uri to limit_req_zone key to limit bruteforce attack on a specific resource instead of the whole service
|
2021-04-09 15:54:26 +02:00 |
|
|
bunkerity
|
aa614f82f9
|
print error when permissions are wrong on common volumes
|
2021-04-09 14:54:15 +02:00 |
|
|
bunkerity
|
c03d410b0a
|
refactored whitelisting of user-agents
|
2021-04-09 14:23:52 +02:00 |
|
|
bunkerity
|
e190167bfc
|
CIDR support with whitelist/blacklist IP
|
2021-04-09 14:10:17 +02:00 |
|
|
bunkerity
|
31e72dce1c
|
fix /usr/local/lib/lua rights and multiple server_name support with autoconf
|
2021-04-09 11:37:13 +02:00 |
|
|
bunkerity
|
b8105fc558
|
feature - whitelist URI
|
2021-04-09 10:31:00 +02:00 |
|
|
bunkerity
|
e73c10fd80
|
crowdsec - fix permissions on /usr/local/lib/lua and on /var/log files
|
2021-04-09 10:01:23 +02:00 |
|
|
bunkerity
|
a122a259c0
|
minor fix on AutoConf logs and auto disable etag with reverse proxy
|
2021-04-09 09:51:17 +02:00 |
|
|
bunkerity
|
7c4894d3b8
|
autoconf - fix remove event, generate config from nginx vars, more logs
|
2021-03-26 15:18:35 +01:00 |
|
|
bunkerity
|
533c2a1034
|
fix sed script when writing site env
|
2021-03-22 09:38:36 +01:00 |
|
|
bunkerity
|
5611d544d6
|
remove reference to USE_PHP
|
2021-03-19 09:38:44 +01:00 |
|
|
bunkerity
|
397182f18d
|
add link to twitter account
|
2021-03-18 18:11:52 +01:00 |
|
|
bunkerity
|
c5c5fb17b5
|
v1.2.3 - swarm support
|
2021-03-18 18:08:42 +01:00 |
|
|
bunkerity
|
017a7780fb
|
README update, default cron update and new parameters to ui
|
2021-03-18 17:11:58 +01:00 |
|
|
bunkerity
|
34d9db7a8b
|
web ui - bug fixes
|
2021-03-18 12:34:46 +01:00 |
|
|
bunkerity
|
361c66ca61
|
fixed bugs with MULTISITE variables and swarm example
|
2021-03-18 10:29:37 +01:00 |
|
|
bunkerity
|
afc6678855
|
road to v1.2.3 - fixing bugs
|
2021-03-17 17:55:56 +01:00 |
|
|
bunkerity
|
c40fb33175
|
road to swarm - automatic reload after jobs
|
2021-03-17 12:16:56 +01:00 |
|
|
bunkerity
|
93ad3c0b51
|
road to swarm - let's encrypt fix
|
2021-03-17 10:37:20 +01:00 |
|
|
bunkerity
|
ceed904882
|
road to swarm - still some mess to fix
|
2021-03-16 17:56:24 +01:00 |
|
|
bunkerity
|
6a714e2ece
|
road to swarm - fix race condition on initial configuration
|
2021-03-14 16:50:08 +01:00 |
|
|
bunkerity
|
0d3da03534
|
prepare /www directory, fix log socket path and whitelist acme challenges path
|
2021-03-14 12:33:59 +01:00 |
|
|
bunkerity
|
33163f65b3
|
init work on disabling root processes
|
2021-03-13 22:52:23 +01:00 |
|
|
bunkerity
|
a2543384cd
|
road to swarm - add openssl to autoconf, fix api_uri in LUA, fix file rights
|
2021-03-13 15:28:15 +01:00 |
|
|
bunkerity
|
3591715f21
|
road to swarm - fixing things
|
2021-03-12 17:31:26 +01:00 |
|
|
bunkerity
|
95f7ca5b2d
|
road to swarm support - needs a lot of testing
|
2021-03-12 15:17:45 +01:00 |
|
|
bunkerity
|
816fa47cbb
|
introducing SWARM_MODE env var
|
2021-03-12 12:40:52 +01:00 |
|
|
bunkerity
|
7509ec2f2c
|
basic API to be used in swarm mode
|
2021-03-12 10:42:31 +01:00 |
|
|
bunkerity
|
781e4c8cbb
|
autoconf little work on swarm support
|
2021-03-10 17:24:02 +01:00 |
|
|
bunkerity
|
e04c783d1e
|
autoconf - init work on swarm mode
|
2021-03-09 17:33:22 +01:00 |
|
|
bunkerity
|
e12b656bd5
|
Merge branch 'patch-7' of https://github.com/thelittlefireman/bunkerized-nginx into dev
|
2021-03-08 14:06:54 +01:00 |
|