librewolf
/
bunkerized-nginx
mirror of https://github.com/bunkerity/bunkerized-nginx
4
0
Fork 1
Code Issues Projects Releases Wiki Activity

fix wrong DENY_HTTP_STATUS setting in docs, fix autoconf ghost/prestashop tests and some UI warns/errors

This commit is contained in:
bunkerity 2022-08-23 11:50:34 +02:00
parent b35dbdffc0
commit 76f035e21d
No known key found for this signature in database
GPG Key ID: 3D80806F12602A7C
5 changed files with 11 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
docs/security-tuning.md
View File

@ -9,7 +9,7 @@ BunkerWeb offers many security features that you can configure with [settings](/
### Deny status code
The first thing to define is the kind of action to do when a client access is denied. You can control the action with the `DENY_STATUS_CODE` setting which allows the following values :
The first thing to define is the kind of action to do when a client access is denied. You can control the action with the `DENY_HTTP_STATUS` setting which allows the following values :
- `403` : send a "classical" Forbidden HTTP status code (a web page or custom content will be displayed)
- `444` : close the connection (no web page or custom content will be displayed)
@ -340,4 +340,4 @@ You can deploy complex authentification (e.g. SSO), by using the auth request se
|---------------------------------------|----------------------------------|---------|--------|--------------------------------------------------------------------------------------------------------------------|
|`REVERSE_PROXY_AUTH_REQUEST` | |multisite|yes |Enable authentication using an external provider (value of auth_request directive). |
|`REVERSE_PROXY_AUTH_REQUEST_SIGNIN_URL`| |multisite|yes |Redirect clients to signin URL when using REVERSE_PROXY_AUTH_REQUEST (used when auth_request call returned 401). |
|`REVERSE_PROXY_AUTH_REQUEST_SET` | |multisite|yes |List of variables to set from the authentication provider, separated with ; (values of auth_request_set directives).|
|`REVERSE_PROXY_AUTH_REQUEST_SET` | |multisite|yes |List of variables to set from the authentication provider, separated with ; (values of auth_request_set directives).|

1
examples/ghost/autoconf.yml
View File

@ -12,6 +12,7 @@ services:
- myghost
environment:
- url=https://www.example.com # replace with your domain
- NODE_ENV=development
labels:
- bunkerweb.SERVER_NAME=www.example.com # replace with your domain
- bunkerweb.USE_REVERSE_PROXY=yes

5
examples/prestashop/autoconf.yml
View File

@ -17,8 +17,9 @@ services:
- DB_PREFIX=prefix_ # replace with a random prefix (good security practice)
- DB_NAME=prestashop
- PS_ENABLE_SSL=1
- ADMIN_MAIL=admin@example.com # change to the prestashop admin email
- ADMIN_PASSWD=changeme # change to the prestashop admin password
- ADMIN_MAIL=admin@example.com # change to the prestashop admin email
- ADMIN_PASSWD=changeme # change to the prestashop admin password
- PS_FOLDER_ADMIN=administration # change to the prestashop admin folder
labels:
- bunkerweb.SERVER_NAME=www.example.com
- bunkerweb.MAX_CLIENT_SIZE=50m

2
ui/main.py
View File

@ -362,7 +362,7 @@ def instances():
next=url_for("instances"),
message=(
f"{request.form['operation'].title()}ing"
if request.form["operation"] is not "stop"
if request.form["operation"] != "stop"
else "Stopping"
)
+ " instance",

7
ui/templates/loading.html
View File

@ -23,11 +23,12 @@
</footer>
</body>
<script>
check_reloading();
const reloading = setInterval(check_reloading, 1000);
async function check_reloading() {
const response = await fetch(`${location.href.replace("/loading", "/check_reloading")}`);
const controller = new AbortController()
const timeoutId = setTimeout(() => controller.abort(), 3000)
const response = await fetch(`${location.href.replace("/loading", "/check_reloading")}`, { signal: controller.signal });
if (response.status === 200) {
res = await response.json();
@ -38,4 +39,4 @@
}
}
</script>
</html>
</html>