132 commits

Author	SHA1	Message	Date
bunkerity	6bb6facd88	add load: true when autobuilding images and move from /bin/sh to /bin/bash	2021-06-22 10:16:20 +02:00
bunkerity	1e02368e8a	linux/docker - common /opt/bunkerized-nginx folder	2021-06-21 14:56:48 +02:00
bunkerity	491d879fec	jobs - cleaning the mess when using autoconf without swarm mode	2021-06-14 17:58:38 +02:00
bunkerity	52534510ec	fix bug when AUTO_LETS_ENCRYPT=yes and certbot can't resolve challenges	2021-06-14 14:59:27 +02:00
bunkerity	01857d8ac0	gen - display the reason when ignoring a variable	2021-06-14 09:58:04 +02:00
bunkerity	ab9f9e0a4c	jobs - fix jobs when MULTISITE=yes	2021-06-14 09:02:16 +02:00
bunkerity	16101144c5	self-signed cert - fix bugs	2021-06-11 11:39:36 +02:00
bunkerity	dd5890e760	geoip - fix bug when using GeoIP	2021-06-11 11:01:13 +02:00
bunkerity	9442e59141	jobs - fix jobs in Swarm mode	2021-06-07 09:48:50 +02:00
bunkerity	fcc6b3b5e4	various bug fixes related to Swarm	2021-06-06 23:22:33 +02:00
bunkerity	c7b81cfc10	various bug fixes related to HTTPS	2021-05-28 14:57:45 +02:00
bunkerity	4a73ae8197	various bug fixes on templates and nginx update to 1.20.1	2021-05-27 09:53:14 +02:00
bunkerity	a991b262ef	remove ClamAV because of GPL and started work on read-only filesystem	2021-05-26 17:18:49 +02:00
bunkerity	a8bc17e836	templating - started integration into docker image	2021-05-26 14:50:50 +02:00
florian	96db3a450d	log - add LOG_LEVEL variable	2021-05-18 21:51:13 +02:00
bunkerity	d9bb97be50	lua - move global vars from lua to site config (untested)	2021-05-18 17:29:00 +02:00
bunkerity	863283d090	started work on moving variables from .lua to nginx	2021-05-18 15:14:45 +02:00
bunkerity	600484b16e	crowdsec - fix bugs and update example	2021-05-18 14:03:16 +02:00
bunkerity	d02985d213	check permissions for missing volumes and add comment about permissions on examples	2021-05-15 21:08:35 +02:00
bunkerity	0b3ff6a9f4	bad behavior - move from fail2ban to pure lua	2021-05-13 16:21:51 +02:00
bunkerity	eb2d0d330d	performance - rsyslog and fail2ban removing	2021-05-13 11:14:39 +02:00
bunkerity	b1d03cd11c	performance - move bad user-agents and referrers checks from nginx to LUA with caching	2021-05-11 15:30:16 +02:00
bunkerity	42c3fb8740	add sandbox allow-downloads to the default value of CONTENT_SECURITY_POLICY	2021-05-11 08:57:23 +02:00
bunkerity	fd61df205f	performance - move external blacklists checks from nginx to LUA	2021-05-10 17:51:07 +02:00
bunkerity	009d6fb5ae	choose connection and nofile numbers, increase error_log level to get modsecurity rules, add MODSECURITY_SEC_AUDIT_ENGINE var	2021-05-05 17:38:22 +02:00
bunkerity	062a39c63a	integrate AquaeAtrae work - add ROOT_SITE_SUBFOLDER	2021-05-03 10:31:37 +02:00
bunkerity	07be626842	hotfix - fix API in autoconf swarm mode	2021-04-28 17:40:54 +02:00
bunkerity	3bb164395e	hotfix - move API_WHITELIST_IP edit to lua.sh	2021-04-28 17:00:50 +02:00
bunkerity	f84fd7c9a2	fix permissions issues for autoconf and fix volume for ghost example	2021-04-27 16:49:45 +02:00
bunkerity	19fa0eb25f	log - print modsec_audit.log to make debugging easier	2021-04-27 09:46:40 +02:00
bunkerity	b4df287228	log - send logs to remote syslog server	2021-04-27 09:30:10 +02:00
florian	5ce41edc03	api - whitelist IP/network for API	2021-04-26 22:22:34 +02:00
florian	42b7a57f01	fix autoconf bug when removing config with multiple server name and increase default LIMIT_CONN_MAX for average website with HTTP2	2021-04-26 11:39:12 +02:00
bunkerity	02f9fbe5fc	autoconf - fix certbot bug when multiple server_name for one service	2021-04-20 11:46:53 +02:00
bunkerity	74417abc9c	fixing bugs - run as GID 101 instead of 0, different permissions checks in swarm mode and disable including server confs in swarm mode	2021-04-16 16:56:45 +02:00
bunkerity	b85c991b6e	bug fixes - /usr/local/lib/lua rights and syntax error in site-config	2021-04-09 17:40:19 +02:00
bunkerity	0d3658adf0	REVERSE_PROXY_HEADERS - use proxy_set_header instead of more_set_headers	2021-04-09 17:27:22 +02:00
bunkerity	0b22209c96	documentation - userns remap feature	2021-04-09 16:22:31 +02:00
bunkerity	e44a1f3e14	added the uri to limit_req_zone key to limit bruteforce attack on a specific resource instead of the whole service	2021-04-09 15:54:26 +02:00
bunkerity	aa614f82f9	print error when permissions are wrong on common volumes	2021-04-09 14:54:15 +02:00
bunkerity	e190167bfc	CIDR support with whitelist/blacklist IP	2021-04-09 14:10:17 +02:00
bunkerity	31e72dce1c	fix /usr/local/lib/lua rights and multiple server_name support with autoconf	2021-04-09 11:37:13 +02:00
bunkerity	b8105fc558	feature - whitelist URI	2021-04-09 10:31:00 +02:00
bunkerity	533c2a1034	fix sed script when writing site env	2021-03-22 09:38:36 +01:00
bunkerity	017a7780fb	README update, default cron update and new parameters to ui	2021-03-18 17:11:58 +01:00
bunkerity	34d9db7a8b	web ui - bug fixes	2021-03-18 12:34:46 +01:00
bunkerity	361c66ca61	fixed bugs with MULTISITE variables and swarm example	2021-03-18 10:29:37 +01:00
bunkerity	afc6678855	road to v1.2.3 - fixing bugs	2021-03-17 17:55:56 +01:00
bunkerity	93ad3c0b51	road to swarm - let's encrypt fix	2021-03-17 10:37:20 +01:00
bunkerity	ceed904882	road to swarm - still some mess to fix	2021-03-16 17:56:24 +01:00