Commit graph

361 commits

Author SHA1 Message Date
florian 96db3a450d
log - add LOG_LEVEL variable 2021-05-18 21:51:13 +02:00
florian 73543f4b0e
hardening - add no-new-privileges 2021-05-18 21:35:58 +02:00
bunkerity d9bb97be50
lua - move global vars from lua to site config (untested) 2021-05-18 17:29:00 +02:00
bunkerity 863283d090
started work on moving variables from .lua to nginx 2021-05-18 15:14:45 +02:00
bunkerity 600484b16e
crowdsec - fix bugs and update example 2021-05-18 14:03:16 +02:00
bunkerity 7c6a13c549
examples - improve nextcloud example so it works with webdav clients 2021-05-17 10:26:35 +02:00
bunkerity b3bb4ec40f
remove unnecessary dependencies and update doc about certificate bundle 2021-05-15 21:55:57 +02:00
bunkerity 69f4657208
examples - fix typo BAD_BEHAVIOR_STATUS_CODES 2021-05-15 21:29:07 +02:00
bunkerity d02985d213
check permissions for missing volumes and add comment about permissions on examples 2021-05-15 21:08:35 +02:00
bunkerity b0ca85ff75
v1.2.5 - performance improvement 2021-05-14 16:42:08 +02:00
Bunkerity 2f115c444d
Merge pull request #131 from bunkerity/issue-templates
Update issue templates
2021-05-14 16:37:37 +02:00
Bunkerity 7f15741ea2 Update issue templates 2021-05-14 16:33:01 +02:00
bunkerity 288b8eb851
docs improvement + road to v1.2.5 2021-05-14 15:41:15 +02:00
bunkerity 61c08fb97b
docs - troubleshooting 2021-05-14 12:12:33 +02:00
bunkerity 01ef47a669
docs - security tuning improvement 2021-05-14 11:15:00 +02:00
florian 71515a9101
doc - volumes list 2021-05-13 20:34:41 +02:00
bunkerity a33d0658c6
docs - road to a beautiful documentation 2021-05-13 17:46:31 +02:00
bunkerity 0b3ff6a9f4
bad behavior - move from fail2ban to pure lua 2021-05-13 16:21:51 +02:00
bunkerity eb2d0d330d
performance - rsyslog and fail2ban removing 2021-05-13 11:14:39 +02:00
bunkerity 5bcbb38638
doc - official document started 2021-05-12 17:35:32 +02:00
bunkerity ca660b2501
init work on official doc 2021-05-12 12:28:01 +02:00
bunkerity 3a34436cd8
add AquaeAtrae example for ROOT_SITE_SUBFOLDER 2021-05-12 12:07:29 +02:00
bunkerity b1d03cd11c
performance - move bad user-agents and referrers checks from nginx to LUA with caching 2021-05-11 15:30:16 +02:00
bunkerity 42c3fb8740
add sandbox allow-downloads to the default value of CONTENT_SECURITY_POLICY 2021-05-11 08:57:23 +02:00
bunkerity f1c043604a
add missing backslash in the quickstart guide and update autoconf examples with the depends_on directive 2021-05-11 08:54:34 +02:00
bunkerity fd61df205f
performance - move external blacklists checks from nginx to LUA 2021-05-10 17:51:07 +02:00
bunkerity 009d6fb5ae
choose connection and nofile numbers, increase error_log level to get modsecurity rules, add MODSECURITY_SEC_AUDIT_ENGINE var 2021-05-05 17:38:22 +02:00
bunkerity ba4185a42e
jobs - fix automatic reload 2021-05-03 14:18:10 +02:00
bunkerity 70976d0fbc
fix user-agent not blocking and add documentation on bundle when USE_CUSTOM_HTTPS=yes 2021-05-03 13:59:55 +02:00
bunkerity 062a39c63a
integrate AquaeAtrae work - add ROOT_SITE_SUBFOLDER 2021-05-03 10:31:37 +02:00
bunkerity 83841b290a
jobs - edit adren work on external blacklists 2021-05-02 16:14:13 +02:00
Bunkerity 10dc58cb6d
Merge pull request #126 from adren/patch-6
deduplicate list of user-agents
2021-05-02 15:14:10 +02:00
Bunkerity 668754686c
Merge pull request #125 from adren/patch-5
more optimized way to generate map referrer file
2021-05-02 15:13:17 +02:00
Bunkerity 84b1933f63
Merge pull request #124 from adren/patch-4
improve the generation of blocking file (abusers)
2021-05-02 15:12:19 +02:00
Bunkerity 15f6d0a32a
Merge pull request #123 from adren/patch-3
improve generation of block file (Tor exit nodes)
2021-05-02 15:11:27 +02:00
Bunkerity e628361a89
Merge pull request #122 from adren/patch-1
huge improvement to generate blocking file
2021-05-02 15:10:52 +02:00
Cyril Chaboisseau f8d71e067e
improved way to generate user-agent file 2021-05-01 19:04:18 +02:00
Cyril Chaboisseau 02ae3b6bd3
change IFS before subshell
There needs to be a change in IFS before the 2 curl commands in order to keep line by line formatting
2021-05-01 15:48:33 +02:00
Cyril Chaboisseau 2fb0e7c473
deduplicate list of user-agents 2021-05-01 15:08:52 +02:00
Cyril Chaboisseau 9adcc2f1a7
more optimized way to generate map referrer file 2021-05-01 14:51:28 +02:00
Cyril Chaboisseau 7b98db4d14
improve the generation of blocking file (abusers) 2021-05-01 12:29:15 +02:00
Cyril Chaboisseau ddb2b85916
improve generation of block file (Tor exit nodes) 2021-05-01 12:25:43 +02:00
Cyril Chaboisseau da1a460a64
huge improvement to generate blocking file
process the file in 2 commands (grep + sed) instead of a loop running on each line
the time to generate the file takes 0.235 seconds instead of one hour, making it roughly 15,000 times quicker
the output file is exactly the same as with the former method
2021-05-01 11:42:07 +02:00
bunkerity 07be626842
hotfix - fix API in autoconf swarm mode 2021-04-28 17:40:54 +02:00
bunkerity 3bb164395e
hotfix - move API_WHITELIST_IP edit to lua.sh 2021-04-28 17:00:50 +02:00
bunkerity bc2568a172
v1.2.4 - nginx 1.20.0 support 2021-04-27 17:43:38 +02:00
Bunkerity 5ec74880d8
update README for v1.2.4 2021-04-27 17:40:33 +02:00
bunkerity f84fd7c9a2
fix permissions issues for autoconf and fix volume for ghost example 2021-04-27 16:49:45 +02:00
bunkerity 6521d7a27a
fix client cache so it works in combination with reverse proxy and examples update 2021-04-27 15:31:56 +02:00
bunkerity 813607fbc3
improve crowdsec example and disable modsec logging when not necessary 2021-04-27 11:21:30 +02:00