mirror of
https://gitgud.io/fatchan/haproxy-protection.git
synced 2025-05-09 02:05:37 +00:00
Update README with new env vars
Remove dataplaneapi junk
This commit is contained in:
@ -18,7 +18,6 @@ Improvements in this fork:
|
|||||||
- Choose protection modes "none", "pow" or "pow+captcha" per-domain or per-domain+path, with paths taking priority.
|
- Choose protection modes "none", "pow" or "pow+captcha" per-domain or per-domain+path, with paths taking priority.
|
||||||
- Whitelist IPs/subnets.
|
- Whitelist IPs/subnets.
|
||||||
- Maintenance mode page for selected domains.
|
- Maintenance mode page for selected domains.
|
||||||
- Include dataplaneapi, to sync map files to disk if edited during runtime.
|
|
||||||
- In POW only mode, provide instructions and an encoded script to find the solution.
|
- In POW only mode, provide instructions and an encoded script to find the solution.
|
||||||
- Many bugfixes.
|
- Many bugfixes.
|
||||||
|
|
||||||
@ -32,10 +31,11 @@ Add some env vars to docker-compose file:
|
|||||||
- RECAPTCHA_SECRET - your recaptcha secret key
|
- RECAPTCHA_SECRET - your recaptcha secret key
|
||||||
- CAPTCHA_COOKIE_SECRET - random string, a salt for captcha cookies
|
- CAPTCHA_COOKIE_SECRET - random string, a salt for captcha cookies
|
||||||
- POW_COOKIE_SECRET - different random string, a salt for pow cookies
|
- POW_COOKIE_SECRET - different random string, a salt for pow cookies
|
||||||
|
- HMAC_COOKIE_SECRET - different random string, a salt for pow cookies
|
||||||
- RAY_ID - string to identify the HAProxy node by
|
- RAY_ID - string to identify the HAProxy node by
|
||||||
- BUCKET_DURATION - how long between bucket changes, invalidating cookies
|
- BUCKET_DURATION - how long between bucket changes, invalidating cookies
|
||||||
- BACKEND_NAME - name of backend to build from hosts.map
|
- BACKEND_NAME - Optional, name of backend to build from hosts.map
|
||||||
- SERVER_PREFIX - prefix of server names used in server-template
|
- SERVER_PREFIX - Optional, prefix of server names used in server-template
|
||||||
|
|
||||||
Add a domain name + backend IP to `haproxy/hosts.map` like:
|
Add a domain name + backend IP to `haproxy/hosts.map` like:
|
||||||
```plain
|
```plain
|
||||||
@ -58,7 +58,6 @@ Before installing the tool, ensure that HAProxy is built with Lua support and ve
|
|||||||
- Copy [haproxy.cfg](haproxy/haproxy.cfg) to /etc/haproxy
|
- Copy [haproxy.cfg](haproxy/haproxy.cfg) to /etc/haproxy
|
||||||
- Edit the `lua-load` directive to be the absolute path to [register.lua](src/scripts/register.lua)
|
- Edit the `lua-load` directive to be the absolute path to [register.lua](src/scripts/register.lua)
|
||||||
- Edit the paths of challenge.js and worker.js in the `http-request return` directive to the absolut path to the respective files in the haproxy/js folder
|
- Edit the paths of challenge.js and worker.js in the `http-request return` directive to the absolut path to the respective files in the haproxy/js folder
|
||||||
- Copy [dataplaneapi.hcl](haproxy/dataplaneapi.hcl) to /etc/haproxy
|
|
||||||
- Copy or link [scripts](src/scripts) to /etc/haproxy/scripts
|
- Copy or link [scripts](src/scripts) to /etc/haproxy/scripts
|
||||||
- Copy or link [libs](src/libs) to /etc/haproxy/libs (or a path where Lua looks for modules).
|
- Copy or link [libs](src/libs) to /etc/haproxy/libs (or a path where Lua looks for modules).
|
||||||
- Copy the map files from the haproxy folder to /etc/haproxy
|
- Copy the map files from the haproxy folder to /etc/haproxy
|
||||||
|
@ -18,7 +18,6 @@ services:
|
|||||||
- ./haproxy/blocked.map:/etc/haproxy/blocked.map
|
- ./haproxy/blocked.map:/etc/haproxy/blocked.map
|
||||||
- ./haproxy/whitelist.map:/etc/haproxy/whitelist.map
|
- ./haproxy/whitelist.map:/etc/haproxy/whitelist.map
|
||||||
- ./haproxy/maintenance.map:/etc/haproxy/maintenance.map
|
- ./haproxy/maintenance.map:/etc/haproxy/maintenance.map
|
||||||
- ./haproxy/dataplaneapi.hcl:/etc/haproxy/dataplaneapi.hcl
|
|
||||||
- ./haproxy/trace.txt:/etc/haproxy/trace.txt
|
- ./haproxy/trace.txt:/etc/haproxy/trace.txt
|
||||||
- ./src/scripts/:/etc/haproxy/scripts/
|
- ./src/scripts/:/etc/haproxy/scripts/
|
||||||
- ./src/libs/:/etc/haproxy/libs/
|
- ./src/libs/:/etc/haproxy/libs/
|
||||||
|
@ -37,11 +37,6 @@ RUN set -eux; \
|
|||||||
; \
|
; \
|
||||||
rm -rf /var/lib/apt/lists/*; \
|
rm -rf /var/lib/apt/lists/*; \
|
||||||
\
|
\
|
||||||
wget -O dataplaneapi_2.4.4_Linux_x86_64.tar.gz https://github.com/haproxytech/dataplaneapi/releases/download/v2.4.4/dataplaneapi_2.4.4_Linux_x86_64.tar.gz; \
|
|
||||||
tar -zxvf dataplaneapi_2.4.4_Linux_x86_64.tar.gz; \
|
|
||||||
chmod +x build/dataplaneapi; \
|
|
||||||
cp build/dataplaneapi /usr/local/bin/; \
|
|
||||||
\
|
|
||||||
wget -O haproxy.tar.gz "$HAPROXY_URL"; \
|
wget -O haproxy.tar.gz "$HAPROXY_URL"; \
|
||||||
# echo "$HAPROXY_SHA256 *haproxy.tar.gz" | sha256sum -c; \
|
# echo "$HAPROXY_SHA256 *haproxy.tar.gz" | sha256sum -c; \
|
||||||
mkdir -p /usr/src/haproxy; \
|
mkdir -p /usr/src/haproxy; \
|
||||||
|
@ -1,29 +0,0 @@
|
|||||||
config_version = 2
|
|
||||||
|
|
||||||
name = "meet_bedbug"
|
|
||||||
|
|
||||||
mode = "single"
|
|
||||||
|
|
||||||
dataplaneapi {
|
|
||||||
user "admin" {
|
|
||||||
insecure = true
|
|
||||||
password = "adminpwd"
|
|
||||||
}
|
|
||||||
|
|
||||||
transaction {
|
|
||||||
transaction_dir = "/tmp/haproxy"
|
|
||||||
}
|
|
||||||
|
|
||||||
advertised {}
|
|
||||||
}
|
|
||||||
|
|
||||||
haproxy {
|
|
||||||
config_file = "/etc/haproxy/haproxy.cfg"
|
|
||||||
haproxy_bin = "/usr/local/sbin/haproxy"
|
|
||||||
|
|
||||||
reload {
|
|
||||||
reload_delay = 5
|
|
||||||
reload_cmd = "service haproxy reload"
|
|
||||||
restart_cmd = "service haproxy restart"
|
|
||||||
}
|
|
||||||
}
|
|
@ -13,10 +13,6 @@ defaults
|
|||||||
timeout client 50000ms
|
timeout client 50000ms
|
||||||
timeout server 50000ms
|
timeout server 50000ms
|
||||||
|
|
||||||
program api
|
|
||||||
command dataplaneapi -f /etc/haproxy/dataplaneapi.hcl --update-map-files
|
|
||||||
no option start-on-reload
|
|
||||||
|
|
||||||
frontend http-in
|
frontend http-in
|
||||||
bind *:80
|
bind *:80
|
||||||
|
|
||||||
|
BIN
img/captcha.png
BIN
img/captcha.png
Binary file not shown.
Before Width: | Height: | Size: 35 KiB After Width: | Height: | Size: 22 KiB |
Binary file not shown.
Before Width: | Height: | Size: 30 KiB After Width: | Height: | Size: 21 KiB |
Reference in New Issue
Block a user