Commit Graph

272 Commits

Author SHA1 Message Date
c0a2f77f8b Read from ddos_config table to determine if nojs script should be shown (allowing to be disabled per domain or path 2025-03-09 23:06:59 +11:00
63a6933aa4 Update challenge.js to try/catch each attempt at clearing subdomain cookies to ignore "rejected for domain" errors 2025-01-25 10:12:00 +11:00
2011f60377 Fix some variables to be local scope instead of globals 2025-01-19 00:23:23 +11:00
413deac66b Change bot-check cookie to Lax because that only breaks cross-site navigations without providing any real securit ybenefit 2024-12-08 12:41:53 +11:00
923957d0e7 Change variable to table map name, for checking against whitelist for admin bypass 2024-11-30 03:55:40 +11:00
ba05a88ca8 Allow admin accounts whitelists to bypass for all domains even if not matching in domtoacc map 2024-11-29 15:22:08 +11:00
bbec69b89b Remove redundant and fix forwarded IP in varnish config
Skip unnecessary methods in haproxy instead of giving extra work to varnish (kept the check in vcl)
2024-11-29 15:19:11 +11:00
2261c2432f Update varnish with critical transit_buffer option 2024-11-21 22:12:28 +11:00
d0b21d4ce1 Fix BANing 2024-11-13 21:25:58 +11:00
f2ad095874 Add suppoer for handling BAN requests 2024-11-13 21:08:23 +11:00
174609313f Update handling for cookies/authed requests 2024-11-13 16:38:34 +11:00
83c2b397e8 fix max-age parsing, remove some varnish ehaders 2024-11-13 16:15:40 +11:00
0016aa5204 Clean up some sockets locations
Remove vcl_init for secret initialisation
2024-11-13 14:20:50 +11:00
bd8079743f add header restriction to cache purging 2024-11-12 20:33:04 +11:00
ad659aa1c5 server name typo 2024-11-12 20:00:14 +11:00
f233c1f06d Switch to unix sockets for varnish<->haproxy comms
Remove some cruft from old caching
2024-11-12 19:58:38 +11:00
0d5e39cad1 Implement varnish for caching alongside haproxy, remove using internal haproxy cache 2024-11-12 18:41:02 +11:00
6643e3f7db default to empty string if nil map lookup in css map 2024-10-21 18:14:53 +11:00
f6e1adf1c5 clear css map 2024-10-21 18:11:28 +11:00
7e44a236a1 Add the custom css map (for bot-check page so far) 2024-10-21 00:07:03 +11:00
f9a3798edb Escape first %s in string format, no need to template in %s... 2024-09-17 21:15:59 +10:00
89ff3637d4 Add an optional USE_INTER_FONT to insert inter css tags and extra css for font
Separate css out into variable to template into body template with first stage template compile
2024-09-17 21:15:04 +10:00
c2074eec5f Precompute captcha section on startup since its based on (what) an ENV
Remove unused captcha_backend_name and captcha backend in config, not needed since haproxy 2.7
2024-09-16 22:30:00 +10:00
601a2b3989 Merge branch 'dev-wl' 2024-09-16 21:13:21 +10:00
45f81f96ae Optimizations, remove a call to string.format, remove an if in else/if for deciding pow and/or captcha check 2024-09-16 21:00:20 +10:00
ab841ef752 Fix the removed return from commenting out updateElem, undoes unnecessary buggy check from previous commit 2024-08-18 19:57:20 +10:00
90df19cbed Update challenge to skip undefined worker answers 2024-08-18 19:51:38 +10:00
f1d827f3b3 Improve red class, make not fullwidth and left aligned text 2024-08-15 23:06:22 +10:00
51e5f82d68 Update challenge.min.js 2024-08-15 22:57:12 +10:00
7ab93e33e7 minify bot check page css 2024-08-15 22:56:30 +10:00
c29a14ffd8 Remove updateelem calls to hide some unnecessary messages in frontend scripts
Update spacing of some elements on bot check page
2024-08-15 22:50:29 +10:00
ba62d322a4 Update bot-check page styling 2024-08-15 22:45:17 +10:00
a0ff482b17 Cleanup server registration and fix for Haproxy 3.0 because newline delimited commands are rejected. Now must be separated by semicolon. 2024-07-11 21:10:03 +10:00
f7dc984d60 Testing new ACLs for query string 2024-07-11 21:09:24 +10:00
f6ec537cb0 Test another stick table, track req.query 2024-07-07 23:03:11 +10:00
53a679fc76 add missing global configs for master-worker mode and crt base 2024-06-30 22:36:54 +10:00
5e60a42383 Bump haproxy to 3.0 in docker build 2024-06-11 15:23:33 +10:00
2920f11ffa ditto of jschan repo change 2024-06-07 16:23:40 +10:00
25f702d157 Add ACL so alt-svc header is only sent when geo continent not matching server env 2024-01-28 17:44:07 +11:00
5a0b3bfabc Browser compatibility improvements. Tweak arguments of translate function, and try/catch navigator.hardwareconcurency 2024-01-20 20:32:29 +11:00
aec1aac1b9 do "www" unconditionally, for now 2023-12-15 20:32:38 +11:00
33f9e76c4f Set cookie expiry properly instead of lasting forever 2023-12-15 00:02:23 +11:00
4c473532f6 Set proper expiry date based on ddos config cex or default 2023-12-14 23:42:46 +11:00
5b709a5819 Update on page challenge to just reload after removing cookies 2023-12-14 23:33:23 +11:00
7fc5efc82b Fix function name typo 2023-12-14 23:28:12 +11:00
63b738b9b5 Add another call to clear cookies for domain to fetch error handler 2023-12-14 23:25:21 +11:00
baba0518dd Update minified scripts 2023-12-14 23:16:33 +11:00
b19bd19581 Delete all basedflare cookies for domain when getting "rejected", prevent a bad (or even expired or changed key) cookie from overwriting a valid cookie in the cookie table 2023-12-14 23:12:08 +11:00
3f1852dd1b Add env var example for maxconn and cache total-max-size 2023-10-19 21:34:02 +11:00
1dd69fd924 Add geo blocking for country and continent, changes get_ip_var lua script section to use two tables 2023-10-15 18:13:52 +11:00