9ad3afbd22
- Updated Definition of Done report with detailed checks and results for backend and frontend tests. - Documented issues related to race conditions and test failures in QA reports. - Improved security scan notes and code cleanup status in QA reports. - Added summaries for rate limit integration test fixes, including root causes and resolutions. - Introduced new debug and integration scripts for rate limit testing. - Updated security documentation to reflect changes in configuration and troubleshooting steps. - Enhanced troubleshooting guides for CrowdSec and Go language server (gopls) errors. - Improved frontend and scripts README files for clarity and usage instructions.
32 lines
1.8 KiB
Go
32 lines
1.8 KiB
Go
package models
|
|
|
|
import (
|
|
"time"
|
|
)
|
|
|
|
// SecurityConfig represents global Cerberus/CrowdSec/WAF/RateLimit settings
|
|
// used by the server and propagated into the generated Caddy config.
|
|
type SecurityConfig struct {
|
|
ID uint `json:"id" gorm:"primaryKey"`
|
|
UUID string `json:"uuid" gorm:"uniqueIndex"`
|
|
Name string `json:"name" gorm:"index"`
|
|
Enabled bool `json:"enabled"`
|
|
AdminWhitelist string `json:"admin_whitelist" gorm:"type:text"` // JSON array or comma-separated CIDRs
|
|
BreakGlassHash string `json:"-" gorm:"column:break_glass_hash"`
|
|
CrowdSecMode string `json:"crowdsec_mode"` // "disabled" or "local"
|
|
CrowdSecAPIURL string `json:"crowdsec_api_url" gorm:"type:text"`
|
|
WAFMode string `json:"waf_mode"` // "disabled", "monitor", "block"
|
|
WAFRulesSource string `json:"waf_rules_source" gorm:"type:text"` // URL or name of ruleset
|
|
WAFLearning bool `json:"waf_learning"`
|
|
WAFParanoiaLevel int `json:"waf_paranoia_level" gorm:"default:1"` // 1-4, OWASP CRS paranoia level
|
|
WAFExclusions string `json:"waf_exclusions" gorm:"type:text"` // JSON array of rule exclusions
|
|
RateLimitMode string `json:"rate_limit_mode"` // "disabled", "enabled"
|
|
RateLimitEnable bool `json:"rate_limit_enable"`
|
|
RateLimitBurst int `json:"rate_limit_burst"`
|
|
RateLimitRequests int `json:"rate_limit_requests"`
|
|
RateLimitWindowSec int `json:"rate_limit_window_sec"`
|
|
RateLimitBypassList string `json:"rate_limit_bypass_list" gorm:"type:text"` // Comma-separated CIDRs
|
|
CreatedAt time.Time `json:"created_at"`
|
|
UpdatedAt time.Time `json:"updated_at"`
|
|
}
|